Chinese threat actors exploited a new zero-day vulnerability in Barracuda's Email Security Gateway (ESG) appliances.
UNC4841 has continued operations despite Barracuda ESG zero-day remediation efforts.
Mandiant is investigating a Barracuda ESG appliance zero-day vulnerability being exploited in the wild.
A vulnerability (CVE-2023-2868) in Barracuda Networks' ESG appliances is actively exploited by attackers, the company has warned.
Barracuda Networks's Status Page - Barracuda identified a vulnerability (CVE-2023-2868) in our Email Security Gateway appliance (ESG) on May 19, 2023..