Announcements

Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

  • 24th August 2026

A security vulnerability has been found in Zimbra Collaboration Suite (ZCS), the email and collaboration tool used by some of our hosting customers. The flaw is called an operating system command

Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-73570

Continue reading

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

  • 24th August 2026
A security vulnerability has been identified in two Oracle tools used for web server and application management: the Oracle HTTP Server and the Oracle Weblogic Server Proxy Plug-in. This flaw is an improper access control issue, meaning the tools may fail to properly restrict who can view, edit, or interact with the data they manage.If exploited, ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 24th August 2026
On 20 July 2026, cybersecurity agency MyCERT issued a security advisory warning that new active exploitation attacks targeting Microsoft SharePoint are currently underway, and recommending that organizations secure their SharePoint deployments. Microsoft SharePoint is a widely used tool many businesses run to host internal team sites, store shared ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 24th August 2026
A security advisory was published on 22 July 2026 regarding a vulnerability in Microsoft Active Directory Federation Services (AD FS), a tool many organizations use to let employees and users log into multiple work apps and internal systems with a single set of credentials.The flaw is caused by the AD FS service having access controls that are not ...
Continue reading