Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

Reported by The Hacker News.

Elsewhere

Help Net Security: Security certification is a snapshot, and buyers read too much into it Read it
Help Net Security: Rental phishing sites use live chat to win over hesitant travelers Read it
The Register: Threat actor targets Indian fintechs on weekends when defenders aren’t watching Read it
CISA: CISA Adds One Known Exploited Vulnerability to Catalog Read it
The Hacker News: Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction Read it
The Hacker News: OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux Read it
BleepingComputer: Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Read it
The Register: Get root on a musl Linux system by slamming it with an overly long password Read it
BleepingComputer: OpenSSH flaw lets attackers log into password-disabled Linux accounts Read it