Security company Barracuda warns that attackers are exploiting a pre authentication authorization bypass bug and a command injection vulnerability in its popular Email Security Gateway ESG products that, when chained, could allow the crims to run commands with root privileges. “We have identified exploitation activity affecting a small number of organizations,” the security vendor said in a late Monday night update to its earlier security advisory. Barracuda declined to answer s questions,...

Read the full article at The Register