A new espionage campaign conducted by the Russia-aligned threat actor TAG-70 has been observed targeting European government and military entities. The attackers are exploiting cross-site scripting (XSS) vulnerabilities to compromise Roundcube mail servers and exfiltrate sensitive data.

Click for details.