SecurityWeek

Zimbra Patches Critical Code Execution Vulnerability

Zimbra has patched a critical zero-click code execution vulnerability that could be triggered when opening a crafted email ...
The Hacker News

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Zimbra fixes a critical stored XSS flaw in its Classic Web Client that could let crafted emails run malicious scripts when ...

This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data

This sneaky attack tricks Microsoft's AI assistant to hand over your data.
SecurityWeek

Organizations Warned of Exploited Joomla Extension Vulnerabilities

Hackers have been exploiting critical vulnerabilities in the Balbooa Forms and iCagenda Joomla extensions for code execution.

Mozilla researchers demonstrate Claude Code vulnerability using hidden DNS records

Agentic coding tools vulnerable to command execution via DNS records ...

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...
Infosecurity-magazine.com

Fortinet Warns Exploit Code Available for Critical Vulnerability

Sysadmins have been urged to prioritize updating a new critical vulnerability in Fortinet’s FortiSIEM solution, as exploit code is currently circulating in the wild. Published on Tuesday, ...
Security

SecurityBridge unveils AI-powered Code Vulnerability Analyzer to strengthen SAP security

SecurityBridge today announced the launch of its SecurityBridge Code Vulnerability Analyzer (CVA) powered by AI, a significant enhancement to its holistic SAP security platform. This tool leverages ...