InfoSecBulletin Cybersecurity for mankind

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and widespread today’s threats are. Daily Security Update is a short, regular report that keeps people and organizations updated on the latest in cybersecurity. It shares timely information on new threats, …

Rapid7 researchers found 17 security flaws in Zimbra Collaboration Suite (ZCS) that mess up authentication, mailbox isolation, and host privileges. These issues let attackers take over user sessions through cross-site scripting, read any mailbox, and gain root access. Admins need to install the latest Zimbra patch updates right away and …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) provides two free tools to help organizations spot security flaws in Microsoft 365 and Google Workspace. ScubaGear and ScubaGoggles check cloud settings against security standards, showing admins where to focus their efforts. Both tools are available to government agencies and private companies. …