Exploited Zimbra Flaw Highlights Shrinking Window to Patch

Dark Reading threat intelligence digest covering active exploitation of critical vulnerabilities, malware and ransomware campaigns, nation-state operations, cloud and mobile threats, industrial control system risks, and emerging AI-agent security issues. The most urgent item is CISA-directed remediation of CVE-2026-73570 in Zimbra, reportedly enabling full communications-account takeover; other notable items include a critical zero-click GitLab flaw, VMware vCenter exploitation, malware evolution, and attacks involving AI systems and agents.