Looker 26.12 has finished rolling out to all Looker (original) instances, turning multi-factor authentication on by default ...

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

The NCSC and partners warned of a novel phishing technique being deployed against high-profile users of Zimbra's ...

Elecom Wi-Fi router and access point vulnerability: JPCERT/CC and IPA confirm three CVEs including CVSS 8.6 OS command ...

Usually, when an attack is done via email, the victim is required to at least download a file or click a link. In this case, a cross-site scripting (XSS) vulnerability in the Zimbra web-based email ...

Admins for the popular email and collaboration suite — a frequent target of state-sponsored APTs — are urged to upgrade as ...

Zimbra 10.1.20 fixes nine flaws, including SNMP command injection and CVE-2026-50055, which could enable email exfiltration.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Facepalm: Popular collaboration platform Zimbra was recently updated to patch a potentially dangerous vulnerability in its Classic Web Client component. In theory, malicious actors could abuse the ...

Jon Gilbert is a Features Writer for Android Police. I've covered Android since 2021, focusing on writing features and guides about Android apps and features that directly affect users. I've attended ...

The latest monthly Patch Tuesday update from Microsoft landed earlier on 14 April, including two notable zero-day flaws amid a total of more than 160 distinct issues, and almost 250 accounting for ...

Cross‑site scripting (XSS) remains one of the most frequently reported web vulnerabilities—not because developers are unaware of it, but because many deployed mitigations address symptoms rather than ...