Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

The feed highlights active exploitation of critical and high-severity vulnerabilities, credential theft, phishing, malware deployment, supply-chain abuse, data exposure, and attacks against enterprise, cloud, AI, network, and mobile platforms. Notable incidents include exploitation of Zimbra, Cisco SD-WAN Manager, Citrix NetScaler, Apple CoreGraphics, and OpenSSL flaws; RMM-enabled phishing; malicious npm packages; OAuth credential theft through MCP servers; and major data or cryptocurrency theft. Several entries describe in-the-wild exploitation or significant operational impact, warranting a