The newly identified bug in a Zoho single sign-on and password management tool has been under active attack since early August.
Source: Threadpost