U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

Security Affairs reports multiple significant cybersecurity developments, including active exploitation of critical vulnerabilities in Zimbra Collaboration Suite (CVE-2026-73570) and GitLab (CVE-2026-19478), CISA KEV additions affecting Zimbra and TrueConf Server, mass exploitation claims involving PTC Windchill/FlexPLM by Cl0p, Russia-linked phishing and OAuth abuse campaigns, Android malware with offline Bluetooth-based data theft capabilities, and active attacks against Siemens S7 PLCs in critical infrastructure. Cisco also disclosed six CVSS 10.0 flaws, though no exploitation was reported.