Hackers Target Zimbra Servers in Active Exploitation Campaign

SecurityWeek reports active exploitation and urgent patching across enterprise and internet-facing technologies. Incidents include exploitation of Zimbra CVE-2026-73570, a critical MLflow SSRF-style flaw used to steal cloud credentials, and rapid exploitation of unauthenticated GitLab vulnerability CVE-2026-19478. Additional high-impact vulnerabilities affect Citrix NetScaler, Cisco Crosswork and Secure Workload, Atlassian, and Splunk. A separate campaign compromised approximately 14,000 Dahua IP cameras in Ukraine, Russia, and neighboring networks.