DanSec

Vendor

Zimbra

In 16 briefs, most recently 1 October 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Coverage in DanSec Daily

  1. Bitget $387.5M zero-day theft, Pentagon DMDC breach of 3M+ service members' records, and Zammad zero-day chain hitting DIVD, plus Citrix and Cisco exploitation.
  2. Nutex Health data breach, over 270 Zimbra servers compromised, and Gitea RCE (CVE-2026-60004) exploited in the wild.
  3. Iran-linked hackers shut a UK power plant for four days, Oracle WebLogic flaw CVE-2026-21962 is actively exploited, and TikTok pays $400M COPPA settlement.
  4. ClarityCheck leaks 9M face images, Operation CameraSwarm hijacks 14,000 Dahua cameras, and GitLab flaw CVE-2026-19478 is exploited.
  5. Origin Energy customer data leak, Upbound's $13M fraud losses, and Laundry Bear's Zimbra zero-day stealing email and 2FA codes.
  6. WordPress wp2shell webshell attacks, Microsoft SharePoint RCE exploitation, and Anubis ransomware targeting Coca-Cola's Fairlife.
  7. Microsoft ties Salesforce intrusions to ShinyHunters; Nihon Kotsu cyberattack and Lidl breach also covered, plus Russian state hacker sanctions and router …
  8. ShareFile customers told to shut down storage controllers after an external threat; WP-SHELLSTORM backdoors thousands of WordPress sites; Zimbra critical flaw.
  9. ADT breach by ShinyHunters, UK Biobank medical data sold on Alibaba, and a Cisco Firepower Firestarter backdoor compromise.
  10. Covers the France Titres government data breach, the $290M Kelp DAO crypto heist tied to North Korean actors, and over 1,500 exposed Perforce P4 servers.
  11. Stryker wiper attack wiping ~80,000 devices, Lazarus linked to Bitrefill breach, and PolyShell Magento RCE flaw.
  12. Cisco FMC zero-day exploited by Interlock ransomware, Stryker cyberattack tied to Iranian-linked Handala, and Aura breach exposing nearly 900,000 contacts.
  13. Covers a 149M credential leak, Fortinet FortiCloud SSO bypass exploitation, and ShinyHunters voice phishing of Okta, Microsoft and Google SSO.
  14. Red Hat and Discord breaches, Cl0p exploiting an Oracle E-Business Suite zero-day, and a GoAnywhere MFT flaw abused in Medusa ransomware attacks.
  15. Oracle E-Business Suite zero-day CVE-2025-61882 exploited by Cl0p for data theft, plus ParkMobile's $1-per-user breach settlement and a Zimbra CVE-2025-27915 …
  16. The Coinbase insider data breach and extortion attempt, SAP NetWeaver exploitation by BianLian and RansomExx, and Samsung MagicINFO Mirai attacks.