A suspected Chinese threat group is targeting universities in the US and Canada by exploiting vulnerabilities in Roundcube, an open-source webmail software. Researchers have found that these attackers are compromising university networks to steal user credentials, which can lead to further breaches and data loss. The incidents raise significant concerns about the security of academic institutions, which often handle sensitive information. Universities need to be vigilant and take steps to secure their Roundcube servers against these vulnerabilities. This ongoing campaign not only affects the targeted universities but also poses a broader risk to the integrity of educational data systems.