Empirical Security Raises $25 Million in Series A Funding

This feed contains multiple high-impact security items: new HollowGraph malware that uses compromised Microsoft 365 calendars as a two-way C2 dead-drop; active exploitation of a ServiceNow AI platform vulnerability tracked as CVE-2026-6875 enabling remote code execution; a Zimbra update addressing multiple critical flaws (command injection, XSS, restriction bypass, SSRF); and an Oracle E-Business Suite zero-day used to exfiltrate personal, financial and health data from Estée Lauder. Other items include a Clover Health data breach via social engineering, a Meta broken access control bounty, Io