1. Roundcube XSS chained with cookie tossing for full inbox access blog | 2026-04-21 00:00 | aikido.dev | original ↗ | #ai-security | #attack-chains | #web-security
2. Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine research | 2026-03-11 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #xss