Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source email solution, such as CVE-2024-42009 (CVSS score: 9.3), to siphon credentials,

The article reports that a suspected China-aligned threat cluster is exploiting critical Roundcube webmail XSS vulnerabilities such as CVE-2024-42009 to compromise university physics and engineering departments’ email systems and siphon credentials, enabling theft of emails and account takeover.[1][3][4][5][8] These flaws allow remote attackers to execute JavaScript when a victim views a crafted email, steal emails, contacts, and passwords, and send emails from the victim’s account, and they have been actively exploited in the wild.[3][4][7] From a RealGround perspective, any AI systems or agents that rely on university email for identity, workflow triggers, or data ingestion are exposed to downstream data leakage and integrity risks if compromised mailboxes are used to feed or control AI workflows. Continuous AI Red Teaming should focus on testing how AI agents handle potentially compromised email-derived data, verifying that sensitive information from email is not blindly ingested, and ensuring robust controls around email-based triggers, credentials, and access tokens used in AI-related pipelines.