Unpatched Calix flaw lets hackers bypass NAT to expose internal devices

BleepingComputer security feed highlighting active and emerging threats, including an unpatched Calix GS7 XGS router vulnerability enabling unauthenticated remote NAT bypass and port forwarding, active exploitation of a Zimbra Collaboration Suite flaw requiring urgent patching, WordPress miniOrange SAML authentication bypass attacks, ToxicPanda Android malware, Android vehicle head-unit proxy botnets, Teams phishing delivering SynkLoader, exposed AWS credentials, and social-engineering incidents. The most urgent items involve actively exploited vulnerabilities and flaws that can enable account