Cyberdudebivash

        NATION-STATE ALERT: Libraesva ESG Zero-Day (CVE-2025-59689) Exploited by Spies for Email System Compromise     By CyberDudeBivash • September 28, 2025, 9:55 PM IST • Threat Intelligence Report   This is a critical threat intelligence alert. A sophisticated nation-state actor is actively exploiting a zero-day, unauthenticated Remote Code Execution (RCE) vulnerability in the Libraesva Email Security Gateway (ESG). The vulnerability, tracked as **CVE-2025-59689**, allows a remote attacker to gain full, `root`-level control of the ESG appliance, bypassing all authentication. An ESG is the frontline defense for corporate email, and its compromise provides the attacker with a privileged position to intercept all incoming and outgoing mail, steal sensitive data, and pivot into the internal network. This campaign, which we are tracking as "Crimson Umbra," is a targeted espionage operation. Libraesva has released an emergency patch that mus...