A security vulnerability has been identified in the Mailgun for WordPress plugin, affecting all versions up to and including 2.2.0. This flaw allows unauthenticated attackers to send requests to Mailgun's services using your WordPress site's stored Mailgun API key, without needing access to your site or Mailgun account.The most serious risk from ...
Continue reading
A security vulnerability has been found in Zimbra Collaboration Suite (ZCS), the platform some of you use for business email, shared team calendars, file storage, and other collaboration tools. This flaw is an operating system command injection bug, which allows bad actors to run unauthorized commands on the server that hosts your Zimbra ...
Continue reading
On 20 July 2026, cybersecurity agency MyCERT published an advisory focused on Microsoft SharePoint, after new methods for exploiting the platform were identified. The advisory shares guidance for hardening SharePoint to defend against these new attack vectors.
Microsoft SharePoint is a widely used business tool for document sharing, team ...
Continue reading
The cybersecurity advisory issued by MyCERT and published on July 22, 2026 outlines a security flaw in Microsoft Active Directory Federation Services (AD FS), a tool many organizations use to manage user logins and control access to online services, including business websites and internal work platforms.
The vulnerability stems from the ...
Continue reading