CISA warns that a Roundcube email server vulnerability patched in September is now actively exploited in cross-site scripting (XSS) attacks.

According to an OX Security analysis, the critical vulnerability, dubbed “Grafana Ghost,” exposes unpatched systems to client-side open-redirect and cross-site scripting attacks.

APIs were the target of 29% of web attacks in 2023, with cybercriminals exploiting the swiftly growing API economy for new avenues of attack, according to a report from Akamai.