May 20, 2023
1 new incident, 1 with updates.
Started
- ClosedMediumNo fix needed
PyPI pauses new users and projects amid a flood of malware
PyPI temporarily stopped new user registrations and new project names for about a day because malicious users and packages outpaced what its small admin team could handle.
PyPIClosed May 21, 2023
Updated
- ClosedPatched
Barracuda Email Security Gateway zero-day (CVE-2023-2868)
A command injection in how Barracuda ESG appliances scan .tar attachments was exploited since October 2022 by China-nexus UNC4841 to backdoor appliances. Barracuda later told customers to replace compromised appliances outright, even after patching.
Barracuda Email Security Gateway (appliance)Closed Jun 15, 2023
