![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUsQOGEiz1-S1hAQWegtjaSqt68ugIGM920bH_-nE_N6FDAC2-YWR2W4ckpsi5T-NEpNyoVsvJ7gaoBNXh9YnDqUS9iAGBxd9ED7HfqA-rCEWdOk2-IPGLhGXaa4yXuhUngRXrUE06tWp8h7DeGvHEP_tWuACWPz_R39awzZho1zBHGMiD9lvt3I-UQSxh/s1600/email-security.jpg)
Barracuda has revealed that Chinese threat actors exploited a new zero-day in its Email Security Gateway (ESG) appliances to deploy backdoor on a “limited number” of devices.
Tracked as CVE-2023-7102, the issue relates to a case of arbitrary code execution that resides within a third-party and open-source library Spreadsheet::ParseExcel that’s used by the Amavis scanner within the
Source:: The Hackers News