The ICRC says a state-backed hacking group attacked its servers last month. The hackers gained access to personal information of over 515,000 people in the “Restoring Family Links” program that helps reunite families separated by war, disaster, and migration. The Red Cross did not attribute the attack to a specific threat actor and urged the hackers not to share, leak, or sell the extremely sensitive data accessed during the incident. The attackers exploited an unpatched critical vulnerability (CVE-2021-40539) in Zoho’s ManageEngine.”]