● Vulnerabilities

Russian Threat Actors Exploit Zimbra Zero-Day to Steal Emails Without User Interaction

Russian hackers leveraged a Zimbra zero-day vulnerability to steal emails without requiring victims to click malicious links.

July 24, 2026

● Vulnerabilities

Multilingual Europe Reveals Critical AI Security Weaknesses

AI security layers fail to provide equal protection against jailbreaking across all languages, exposing vulnerabilities in multilingual environments.

July 24, 2026

● Vulnerabilities

Russian Threat Actors Leverage Zimbra Zero-Day to Exfiltrate 90 Days of Email Data

Russian hackers are exploiting a Zimbra zero-day vulnerability to steal 90 days of emails using a sophisticated exfiltration framework called…

July 24, 2026

● Vulnerabilities

Google Chrome 150 Patches Four High-Severity Security Flaws

Google Chrome version 150.0.7871.186 addresses four high-severity vulnerabilities affecting Codecs, WebMCP, Blink, and Input components.

July 24, 2026

● Vulnerabilities

RefluXFS Vulnerability Enables Root Access in Linux Systems

Nine-year-old RefluXFS flaw (CVE-2026-64600) in XFS filesystem allows unprivileged users to gain root access, affecting over 16.4 million systems.

July 24, 2026

● Vulnerabilities

Google Issues Emergency Chrome Update to Fix Four High-Severity Flaws

Google released emergency Chrome update 150.0.7871.186/.187 addressing four high-severity memory safety vulnerabilities including out-of-bounds write and use-after-free flaws.

July 24, 2026

● Vulnerabilities

NodeBB Patches Eight AI-Discovered Vulnerabilities Exposing Admin Access and Private Messages

NodeBB fixed eight high-severity flaws found by AI pentest agents in six hours, affecting all versions before 4.14.0 and exposing…

July 24, 2026

● Vulnerabilities

Russian APT Group Laundry Bear Exploits Zimbra Zero-Day to Steal Email Credentials

US agencies warn Russian group Laundry Bear is exploiting CVE-2025-66376, a Zimbra flaw, to steal email accounts from organizations running…

July 24, 2026

● Vulnerabilities

Critical Bing Images Flaws Allow Remote Code Execution via Malicious SVG Files

Three critical RCE vulnerabilities in Microsoft infrastructure allow attackers to execute commands on Bing servers using crafted SVG files. All…

July 24, 2026

● Vulnerabilities

Claude Code Vulnerability Allows Silent File Exfiltration via Symbolic Links

Tego AI reveals second Claude flaw in one week. Claude Code can be tricked into sending files outside project directories…

July 24, 2026