The National Security Agency has identified a vulnerability that Russian cyber actors take advantage of to attack mail transfer networks.
Sandworm Team, a Russian military group, has exploited the CVE-2019-10149 vulnerability found in the Exim software that Linux and Unix systems use as a mail transfer agent, NSA said Thursday.
The vulnerability allows malicious entities to remotely strike systems via codes. Unpatched Exim software may experience disabled security, operation from unauthorized users and other forms of network exploitation caused by the vulnerability.
Exim and NSA encourage users to apply the software's latest patch as a measure against cyber actors planning to exploit CVE-2019-10149.
Related Articles
Defense Secretary Pete Hegseth, a 2025 Wash100 Award recipient, has unveiled new directives aimed at reshaping the culture and standards of the Department of Defense during a 45-minute address to senior military leaders at Quantico, Virginia. Hegseth outlined reforms that he said will restore focus on warfighter readiness, discipline and leadership, DOD said Tuesday. “The topic today is about the nature of ourselves because no plan, no program, no reform [and] no formation will ultimately succeed unless we have the right people and the right culture at the Department of War,” Hegseth told the audience, underscoring his view that the
Zachary Terrell has been named chief technology officer of the Department of Health and Human Services, FedScoop reported Monday. Three anonymous officials confirmed his designation, which aligns with HHS’ broader restructuring of its technology operations under Secretary Robert Kennedy Jr. This effort includes consolidating IT offices and implementing ChatGPT department-wide, highlighted by an OpenAI agreement with the General Services Administration to provide agencies with ChatGPT access for $1 each over the next year. DOGE Background and NSF Involvement Terrell previously held a role related to the Department of Government Efficiency at HHS and the National Science Foundation, where he was involved
The Department of the Air Force has issued a new memorandum that classifies software as a service as a commodity-based subscription service rather than a licensed software asset. In a LinkedIn post, the DAF chief information officer said the policy change shifts the department’s focus to usage, consumption and performance, unlocking real-time visibility into SaaS utilization, centralized procurement and cost control, stronger alignment with zero trust and data ownership mandates, and reduced sustainment burden on the workforce. Unlike traditional licenses, which grants ownership of the product, SaaS provides only access to applications. That distinction, according to the memo, makes it