Libraesva rolled out an emergency update for its Email Security Gateway (ESG) solution to fix a vulnerability exploited by threat actors believed to be state sponsored. The email security product protects email systems from phishing, malware, spam, business email compromise, and spoofing, using a multi-layer protection architecture. According to the vendor, Libraesva ESG is used by thousands of small and medium businesses as well as large enterprises worldwide, serving over 200,000 users. “This occurs due to an improper sanitization during the removal of active code from files contained in some compressed archive formats,” Libraesva explains. Libraesva says that the patch was released as an emergency update 17 hours after discovering the exploitation.