ThreatHuntersJournal
← Back
VulnerabilityDark Reading·3 hours ago

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

CISA has issued a three-day deadline for federal agencies to patch a Zimbra vulnerability (CVE-2026-73570) that enables complete takeover of user communications. The flaw is reportedly being actively exploited in the wild, underscoring the critical nature of the threat. The compressed patching timeline reflects the urgency of mitigating this high-severity vulnerability before adversaries can gain further access to agency systems.

Read full article at Dark Reading ↗

Related Articles

VulnerabilityThe Hacker News·10 hours ago

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than they actually are. Plenty to clean up. Here’s the short version. ⚡ Threat of the Week U.S.

VulnerabilityCISA Advisories·13 hours ago

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added CVE-2026-21962, an improper access control vulnerability affecting Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities Catalog based on confirmed active exploitation. The vulnerability poses significant risk as it allows total asset compromise post-exploitation, and CISA's Binding Operational Directive 26-04 requires federal agencies to prioritize rapid remediation of such high-risk KEV Catalog entries on publicly exposed systems. CISA encourages all organizations to adopt risk-based vulnerability management practices and prioritize remediation of cataloged exploited vulnerabilities.