Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data

Ars Technica security feed covering major cybersecurity incidents and research, including exploitation of a critical Zimbra command-injection flaw to steal email, government and corporate data breaches, phishing and ClickFix social-engineering campaigns, exploit kits targeting Chrome and Windows, AI-agent and LLM security weaknesses, surveillance-camera compromise, and large-scale credential or identity-data exposure. The most immediately actionable item is active exploitation of the Zimbra vulnerability; affected organizations should prioritize vendor patches, threat hunting, and email-comp“