Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

The feed reports active exploitation of multiple newly disclosed vulnerabilities, including critical pre-authentication flaws in Cisco SD-WAN Manager and Citrix NetScaler, a high-severity Zimbra command-injection issue, OpenSSL DTLS memory disclosure, and an Apple CoreGraphics flaw exploited in targeted attacks. It also covers phishing and ClickFix campaigns delivering RATs and RMM tools, malicious npm packages, AI-agent and MCP credential risks, Android banking malware, data theft, and major cryptocurrency theft. Several incidents involve in-the-wild exploitation and remote code execution, or