InfoSecBulletin Cybersecurity for mankind
Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that allow them to run commands on a weak server without needing to log in or get an employee to open a message.
The focus is on CVE-2026-73570, a command-injection vulnerability with the server’s SNMP notification feature. It impacts systems that have the optional zimbra-snmp package and have SNMP notifications on, making a usual monitoring path a way in.
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
Microsoft Threat Intelligence found and tracked the attacks, discovering affected groups in many areas and industries. Microsoft said in a report said that attackers combined automated payload delivery with hands-on keyboard activity after gaining access.
The effects go beyond one mailbox. Investigators found web shells, encrypted reverse connections, stolen login details, ongoing remote access tools, and efforts to gather mail data. This needs updates and checks in the organizations looked into by Microsoft.
TeamViewer Vulnerabilities
TeamViewer has released updates to fix five serious security problems in its Full Client, Host, and other parts for Windows, Linux, and macOS. The biggest flaw could let attackers get around remote-session rules and possibly run code on weak systems.
The company urged customers to update TeamViewer clients to version 15.82 or the latest version available. TeamViewer said it is not aware of public disclosure or active exploitation of the vulnerabilities in the wild.
| CVE ID | Vulnerability | Severity | CVSS |
|---|---|---|---|
| CVE-2026-19743 | Path traversal in local IPC | High | 7.8 |
| CVE-2026-92368 | Heap buffer overflow in .tvs playback |
High | 7.8 |
| CVE-2026-92369 | TOCTOU race in Windows installer | High | 7.3 |
| CVE-2026-92370 | Improper access control | High | 8.8 |
| CVE-2026-92371 | Improper link resolution | High | 7.0 |
Organizations need to find systems using TeamViewer Full Client or Host and upgrade to version 15.82 or the newest supported release.
