Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Russian state-backed hackers from APT28 are actively exploiting a high-severity stored cross-site scripting vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite (ZCS) to target Ukrainian government entities. The flaw allows unauthenticated attackers to execute remote code and harvest sen...
On January 10, 2026, Microsoft released its Patch Tuesday updates, fixing 114 vulnerabilities, including three classified as zero-day flaws. These updates affect various Microsoft products and are crucial for maintaining system security against potential exploits.
In January 2026, Adobe released 11 security patches addressing vulnerabilities in its software. Microsoft also issued updates during the same Patch Tuesday. Users of Adobe products and Microsoft software are advised to apply these updates promptly to mitigate potential risks.
