Vulnerability Exploitation

University mail servers just gave a suspected China-aligned state-sponsored group the better part of a year of open access to physics and engineering research at U.S. and Canadian universities — not because the vulnerabilities were secret, but because nobody at the departmental level clearly owned patching them. The campaign, tracked by Proofpoint as UNK_MassTraction and…