Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The feed reports active exploitation of multiple critical vulnerabilities, including FortiMail arbitrary file writes, Cisco Catalyst SD-WAN Manager authentication bypass, Citrix NetScaler pre-authentication flaws, and Zimbra command injection. It also covers ransomware activity, persistent WordPress backdoors, phishing and RMM abuse, AI platform misuse, data exposure, cryptocurrency theft, and emerging browser, CPU, and cryptographic weaknesses. Several vulnerabilities are listed as zero-days or CISA KEV entries and require urgent remediation.