State-backed advanced persistent threat (APT) groups are likely among those exploiting a critical flaw in a Zoho single sign-on and password management solution since early August 2021
https://www.securitymagazine.com/articles/96115-apt-actors-exploiting-newly-identified-vulnerability-in-manageengine-adselfservice-plus