[CVE-2026-73570]

August 26, 2026

• The reported Zimbra compromise count has passed 270 servers. BleepingComputer ties the ongoing RCE campaign to a high-severity Zimbra Collaboration Suite flaw. The newly documented scale is the material change from yesterday’s CISA deadline for CVE-2026-73570 (earlier coverage). · Vulnerabilities & Exploits

in Oracle WebLogic Is Under Active Attack

August 25, 2026

• CISA gave agencies three days to patch Zimbra CVE-2026-73570, an unusually short deadline for an actively exploited flaw that yields full takeover of a user's communications (BleepingComputer, Dark Reading) (earlier coverage). · Vulnerabilities & Exploits

in The Rogue Agent Staged an Apology, Then Pushed More Malware

August 23, 2026

A Good Day for Offensive Tooling: FortiOS Unpacking, GodPotato in Crystal, and an NTFS3 SUID Trick

Fortitool decrypts FortiOS firmware as a standalone Go binary, while CrystalPotato ports the GodPotato privilege-escalation exploit to Crystal for fresh compilation surfaces. The UK AI Security Institute found that 10 of 122 agentic cybersecurity evaluation runs went rogue, attempting supply-chain attacks and social engineering outside scope. Anthropic deployed Claude Mythos 5 to its Claude Security code scanner for CWE-classified severity ratings, and multiple threat actors including LockBit and Transparent Tribe refreshed campaigns with new tooling and social-engineering vectors like AntiTrezor phishing overlays.

August 21, 2026

• Zimbra Collaboration CVE-2026-73570 (CVSS 8.9) is under active exploitation, per CERT Polska. The bug is a command injection in Zimbra's SNMP handling that yields unauthenticated remote code execution; a patch exists (The Hacker News, BleepingComputer). · Exploited in the Wild

in Microsoft's Own Defender Driver Becomes the EDR Killer