Announcements

Synacor Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

  • 22nd August 2026
A security vulnerability has been identified in Zimbra Collaboration Suite (ZCS), the email and team collaboration platform used by some of our hosting clients for hosted mail, contact management, and shared workspace features.This flaw is an operating system command injection issue. It can be exploited by an attacker who does not have a valid ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 22nd August 2026
On July 20, 2026, cybersecurity agency MyCERT published an advisory warning of new, active attempts to exploit security vulnerabilities in Microsoft SharePoint. SharePoint is a widely used Microsoft platform that many organizations rely on for team collaboration, document sharing, and running internal or public-facing websites, so these ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 22nd August 2026
On July 22, 2026, cybersecurity authority MyCERT published an advisory for a security vulnerability affecting Microsoft Active Directory Federation Services (AD FS). AD FS is a Microsoft tool commonly used by organizations to manage user logins and control access to apps, services, and internal systems.The vulnerability stems from the service ...
Continue reading

MA-1473.072026: MyCERT Advisory - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  • 22nd August 2026
A security advisory released by MyCERT on July 22, 2026, identifies a vulnerability affecting Microsoft SharePoint Server. The issue is a missing authentication flaw for a critical server function.For users running SharePoint Server on their hosting account, this gap means the critical function does not require valid login credentials to access. ...
Continue reading