Signal
China-aligned hackers exploit Roundcube vulnerabilities to target US and Canadian universities
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-07-07 09:00 UTCUpdated 2026-07-07 10:28 UTC
rss
cveexploitsbreachesthreat_actorsincident_response
Source links open
Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.3 top sources shown
Overview
A China-aligned espionage group has been exploiting critical, now-patched vulnerabilities in the open-source Roundcube webmail software to infiltrate physics and engineering departments at US and Canadian universities.
Score total
1.35
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
- Campaign activity observed since May 2026 and still ongoing.
- Many victims likely remain unaware of compromise, increasing risk.
- Recent public disclosures of patched Roundcube vulnerabilities enable detection and mitigation.
Why it matters
- Targets sensitive academic research linked to national security and advanced physics.
- Exploits critical vulnerabilities in widely used open-source email software.
- Highlights ongoing stealthy espionage campaigns against educational institutions.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- China-aligned hackers exploited critical Roundcube vulnerabilities CVE-2024-42009 and CVE-2025-49113 to steal credentials and deploy malware in university networks.
How sources frame it
- Proofpoint Researchers: neutral
Consolidated multiple reports into a concise narrative emphasizing the espionage campaign's technical details and impact on academia.
All evidence
All evidence
Chinese Cyberespionage Exploits University Roundcube Servers
BankInfoSecurity · bankinfosecurity.com · 2026-07-07 10:28 UTC
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
thehackernews · thehackernews.com · 2026-07-07 09:10 UTC
Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities
CyberScoop · cyberscoop.com · 2026-07-07 09:00 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 3
Top publishers (this list)
- BankInfoSecurity (1)
- thehackernews (1)
- CyberScoop (1)
Top origin domains (this list)
- bankinfosecurity.com (1)
- thehackernews.com (1)
- cyberscoop.com (1)