Six Maximum-Severity Flaws Found in Cisco Products

The feed reports multiple major cybersecurity developments, including active exploitation of critical vulnerabilities in GitLab, Zimbra Collaboration Suite, TrueConf Server, MLflow, and PTC Windchill/FlexPLM; six CVSS 10.0 Cisco flaws discovered internally; Russia-linked espionage campaigns abusing phishing, OAuth, and WhatsApp; Android malware capable of offline data exfiltration; attacks against Siemens S7 PLCs; and a U.S. indictment of Iranian cyber-espionage operators. Overall risk is critical due to confirmed exploitation of internet-facing enterprise products and threats to critical-inะn