Announcements

Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

  • 23rd August 2026
A security flaw has been identified in Zimbra Collaboration Suite (ZCS), a software platform many businesses use for team email, shared calendars, and collaborative work tools. The issue is an operating system command injection vulnerability. It allows unauthenticated attackers (people who do not have a login to your Zimbra instance) to send ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 23rd August 2026
On 20 July 2026, Malaysia’s national cybersecurity agency (MyCERT) released an advisory focused on improving security for Microsoft SharePoint, a widely used platform for file sharing, team collaboration, and managing internal business workflows. The advisory was issued after new methods for exploiting unsecured SharePoint installations were ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 23rd August 2026
On 22 July 2026, cybersecurity authority MyCERT released advisory MA-1472.072026 identifying a security flaw in Microsoft Active Directory Federation Services (AD FS), a tool many organizations use to manage single sign-on access for work applications and services. This tool lets users log in to multiple work tools with one set of credentials ...
Continue reading

MA-1473.072026: MyCERT Advisory - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  • 23rd August 2026
On July 22, 2026, Malaysia’s national cybersecurity agency (MyCERT) released an advisory for a vulnerability impacting Microsoft SharePoint Server, a tool many businesses use to store shared files, collaborate on team projects, and manage internal work content. The flaw is classified as a missing authentication for critical function issue, ...
Continue reading