Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes

This feed highlights multiple high-impact security developments: Zimbra released v10.1.19 to patch a critical stored XSS in its Classic Web Client that can execute code when malicious mail is opened (no CVE yet); Microsoft patched RoguePlanet (CVE-2026-50656, CVSS 7.8) in the Malware Protection Engine; researchers disclosed 222 GitHub repositories distributing malware via fake Go modules; a new GodDamn ransomware family uses a signed PoisonX driver to disable security software; Microsoft uncovered GigaWiper, a modular Go destructive backdoor; AssuranceAmerica confirmed a breach exposing nearly