InfoSecBulletin Cybersecurity for mankind

Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that allow them to run commands on a weak server without needing to log in or get an employee to open a message. The focus is on CVE-2026-73570, a command-injection vulnerability …

Google has said that hackers are using two serious Citrix NetScaler security holes to get root access, set up hidden web shells, and enter victims’ networks. The activity has impacted groups in North America and Europe. This includes government, finance, technology, education, law, and professional services. Mandiant Consulting and Google Threat …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could allow hackers to run code from afar or stop the system from working. Tracked as CVE-2026-84411, the security issue is a pre-authentication integer underflow in RouterOS’s web-management HTTP request handling. CISA …