Zimbra Collaboration Servers Under Siege from Exploited RCE Vulnerability
PremiumCERT Polska reports active exploitation of critical Zimbra RCE (CVE-2026-73570) targeting collaboration servers.
§Source · Bleeping Computer
Bleeping Computer
Every dispatch we have aggregated from Bleeping Computer.
All dispatchesFriday, August 21
Wednesday, August 19
Microsoft Races to Patch ShieldBreak Zero-Day Vulnerability in Defender
Microsoft developing a Defender patch for ShieldBreak zero-day (CVE-2026-69414) disclosed by researcher 'Nightmare Eclipse'.
Clop Gang's Custom Web Shell Targets Windchill for Data Theft
Clop gang developed a Java web shell tailored for PTC Windchill and FlexPLM to decrypt credentials and exfiltrate files.
CISA Warns of Ransomware Abuse of Windows Task Host Vulnerability
CISA confirms ransomware groups are exploiting a high-severity Windows Task Host vulnerability previously flagged as actively exploited.
Monday, August 17
Friday, August 14
Wednesday, August 12
Microsoft SharePoint Vulnerability Fuels New Ransomware Campaigns
CISA confirms active exploitation of a high-severity Microsoft SharePoint RCE now used in ransomware intrusions and lateral movement.
Gunra Ransomware Exploits Firewall and VPN Vulnerabilities
US and South Korean agencies warn of Gunra exploiting firewall and VPN flaws to hit government and critical infrastructure.
Microsoft's August Security Update Tackles Over 400 Vulnerabilities, Highlights Three Zero-Day Exploits
Microsoft released massive August updates covering hundreds of CVEs, including multiple zero-days — prioritize exploited and high-impact fixes.
Monday, August 10
TrueConf Servers Compromised: Backdoor Infiltration Discovered
PremiumThreat actors exploited unpatched TrueConf servers to replace client installers with trojanized backdoors for remote access.
Cyberattack Disrupts Operations at North Carolina Ports
PremiumCyberattack disrupted gates and operations across three North Carolina ports, drawing Coast Guard attention.
Friday, August 7
Wednesday, August 5
ChainDrop Attack Compromises Over a Thousand npm Packages
ChainDrop poisoned 1,300+ npm packages, threatening developer supply chains and downstream applications.
Critical Vulnerability in N-able N-central Exploited, Immediate Action Required
Active exploitation of N-able N-central CVE-2026-18577 allows attackers admin access to RMM servers; urgent patching recommended.
Monday, August 3
CISA Alerts on Cyber Threats to U.S. Water Infrastructure
PremiumCISA warns of rising attacks on internet-exposed PLCs in water/wastewater systems and recommends removing public exposure.
Flaw in Coldcard Wallets Enables Major Bitcoin Theft
PremiumCOLDCARD RNG/firmware flaw enabled rapid sweeping of Bitcoin wallets, linked to tens of millions in stolen funds.
Friday, July 31
Urgent Security Alert: Critical Flaw in JetBrains TeamCity Exposes Systems to Remote Attacks
PremiumJetBrains warns of a critical authentication bypass in TeamCity on-premises that could lead to remote code execution if exploited.
ShinyHunters Threatens to Leak Brinks Home Customer Data After Alleged Breach
PremiumShinyHunters claims to have breached Brinks Home systems and threatens to leak allegedly stolen customer data.
Healthcare Faces Increased Threat from ShinyHunters Data Breaches
PremiumHealth-ISAC warns healthcare and medtech organizations about an increase in successful ShinyHunters data-theft attacks targeting the sector.
Get these articles delivered to your inbox.
Subscribe free