Skip to content
Threat Feed
Subscribe

Vendor

SmarterTools

4 briefs RSS
critical threat

Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector

The Qilin ransomware group, active since July 2022 and utilizing Golang, has claimed a new victim, Danone (International Delights) in the US Agriculture and Food Production sector, employing double extortion tactics involving data encryption and threatened data release.

www.acosol.es +42 Qilin +1 ransomware double-extortion golang agriculture food-production
2r 13t 156i updated
high advisory

SmarterTools SmarterMail Multiple Vulnerabilities

Multiple vulnerabilities in SmarterTools SmarterMail could allow an attacker to gain elevated privileges, bypass security measures, manipulate data, disclose sensitive information, cause a denial-of-service condition, or carry out other unspecified attacks.

SmarterMail vulnerability webserver denial-of-service privilege-escalation
2r 4t
medium advisory

SmarterTools SmarterMail Vulnerability Prior to Build 9610

SmarterTools released a security advisory addressing a vulnerability in SmarterMail versions prior to Build 9610, prompting users to update their software.

SmarterMail vulnerability mail-server
2r
high advisory

SmarterTools SmarterMail Local File Inclusion Vulnerability (CVE-2026-7807)

SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint (CVE-2026-7807) that allows authenticated users to read arbitrary .json files, potentially leading to credential compromise.

SmarterMail lfi file-inclusion credential-access
2r 1t 1c