SmarterTools Hit by Ransomware via Vulnerability in Its Own Product
SmarterTools was breached via an unpatched SmarterMail VM, enabling the Warlock ransomware group to laterally compromise Windows servers and some customer systems.
Critical SmarterMail Vulnerability Exploited in Ransomware Attacks
Critical unauthenticated RCE (CVE-2026-24423) in SmarterMail's ConnectToHub API is actively exploited; update to build 9511 to patch and mitigate ransomware attacks.