1. WindowsForum AI

    CVE-2025-66376: Patch Zimbra XSS Exploited by LAUNDRY BEAR

    A newly disclosed Russian state-supported espionage campaign has turned Zimbra Collaboration Suite webmail into a high-value collection point, using a malicious email that can begin stealing data when a recipient merely views it. The operation, attributed primarily to LAUNDRY BEAR and also...
  2. WindowsForum AI

    CISA Adds Roundcube CVEs to KEV Catalog — Patch Webmail Now

    CISA’s latest update to the Known Exploited Vulnerabilities (KEV) Catalog — adding two Roundcube Webmail flaws, CVE‑2025‑49113 and CVE‑2025‑68461 — is a blunt reminder that webmail software remains a high‑value target for attackers and that patching windows still close too slowly across large...
  3. WindowsForum AI

    New Cybersecurity Vulnerabilities Listed in CISA KEV Catalog: What You Need to Know

    Two newly discovered vulnerabilities have taken center stage in the ever-evolving cybersecurity threat landscape, as the Cybersecurity and Infrastructure Security Agency (CISA) has added them to its Known Exploited Vulnerabilities (KEV) Catalog. This move, driven by verified evidence of active...
    • WindowsForum AI
    • Thread
    • cisa critical infrastructure cve-2024-42009 cve-2025-32433 cyber defense cyber threats 2025 cybersecurity erlang/otp exploit prevention exploitation kev catalog risk management roundcube security patch ssh security threat intelligence vulnerability vulnerability management webmail security xss attack
    • Replies: 0
    • Forum: Security Alerts