**Critical Web Client Vulnerability Hits Zimbra Users** Zimbra, a popular email and collaboration software suite used by hundreds of millions worldwide, is urging its customers to patch a critical vulnerability affecting its Classic Web Client. The flaw, which has yet to receive a CVE ID, allows attackers to steal sensitive information through specially crafted emails … Read more
Jen Ellis, a stalwart advocate for security researchers, has made waves in the cybersecurity community with her tireless efforts to reform laws that stifle legitimate research. Her dedication and unyielding spirit have earned her numerous accolades, including a recent honor from the British Crown. Ellis’s journey as a champion of cybersecurity policy began over a … Read more
Zimbra’s Classic Web Client Hit by Critical XSS Flaw, Patch Urged for Millions of Users A severe vulnerability has been discovered in Zimbra’s Classic Web Client, a widely used email and collaboration software suite that serves hundreds of millions of people worldwide. The security flaw, which allows attackers to execute malicious code through specially crafted … Read more
In a growing concern for organizations worldwide, artificial intelligence (AI) agents are exposing a gaping hole in identity security. These non-human entities, which include service accounts, OAuth applications, and machine identities, already outnumber human users by as much as 50 to one in many enterprise environments. The issue lies in the fact that identity security … Read more
A shocking case has emerged in the US, highlighting a brazen attempt to steal government-seized cryptocurrency while an individual was behind bars. Rossen G. Iossifov, a Bulgarian national serving a 121-month prison sentence for helping launder millions stolen from American victims of online fraud, has been charged with stealing $290,000 in seized crypto. Iossifov’s alleged … Read more
Critical Vulnerability Exploited in Gitea Docker Image, Leaving Thousands of Instances at Risk A severe security vulnerability in the official Docker image for Gitea, a popular self-hosted Git service alternative to GitHub and GitLab, has been actively exploited by hackers. The flaw, tracked as CVE-2026-20896, allows attackers to impersonate any user, including administrators, on affected … Read more
In the past few years, cybersecurity teams have been facing a growing challenge: non-human entities with access to sensitive data and systems. These “replicants” are AI agents, service accounts, OAuth applications, workload identities, and machine identities that already outnumber people in many enterprise environments. The issue isn’t new, but it’s gaining urgency as these entities … Read more
A Shocking Case of Crypto Theft: Money Launderer Accused of Swiping Seized Funds from Prison In a stunning example of brazen audacity, a Bulgarian national has been charged with stealing over $290,000 in government-seized cryptocurrency while serving time in prison for his role in laundering millions stolen from American victims. Rossen G. Iossifov, 53, is … Read more
A critical security vulnerability has been actively exploited by hackers, allowing them to impersonate any user on a self-hosted Git service called Gitea. The issue affects deployments using the official Docker image and can be exploited even if authentication is enabled. With over 6,200 Gitea instances exposed on the public web, this flaw poses a … Read more
Progress Software has issued a warning to customers using its ShareFile enterprise secure file-sharing platform, urging them to immediately shut down their Storage Zone Controllers due to a “credible external security threat” targeting these on-premises servers. This move affects organizations that use a hybrid deployment model, where files are hosted locally within the company’s storage … Read more