Cybersecurity

Barracuda Networks Grapples with Two Zero-Day Vulnerabilities in ESG Devices

Barracuda Networks recently encountered a challenge as it uncovered two zero-day vulnerabilities, specifically CVE-2023-7102 and CVE-2023-7101. These Barracuda vulnerabilities were intricately linked to the Spreadsheet::ParseExcel library, revealing an Arbitrary Code Execution (ACE) flaw in the third-party library.  Exploited by the China Nexus actor UNC4841, these security flaws posed a serious threat by targeting Barracuda Email […]