Special Delivery: Defending and Investigating Advanced Intrusions on Secure Email Gateways

In today's enterprise landscape, secure email gateways play a critical role in filtering and scrutinizing email content for potential threats. Positioned at the intersection between the public Internet and corporate email servers, these gateways become highly coveted targets for malicious actors. The recently disclosed vulnerability in the Barracuda Email Security Gateway (ESG), CVE-2023-28686, had a significant impact on organizations worldwide while providing a level of access to threat actors in an environment that significantly enabled their overall objectives.

SANS DFIR …

advanced barracuda corporate corporate email critical defending delivery email enterprise internet intersection malicious malicious actors play potential threats public role secure email secure email gateways servers special threats today vulnerability