Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes

Multiple high-impact security events: Zimbra released Classic Web Client 10.1.19 to address a critical stored XSS that can execute code when malicious emails are opened (no CVE assigned yet). Microsoft patched RoguePlanet (CVE-2026-50656, CVSS 7.8) in the Malware Protection Engine used by Defender. Threat reports detail new and evolving malware/ransomware activity — GigaWiper (modular Go backdoor with destructive wiping), GodDamn ransomware (uses signed PoisonX driver to disable security products), and a large operation distributing malware via 222 fake Go packages on GitHub. Additional issues