Exploit

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

DIVD says Zammad zero-days enabled AI-driven network breach Source: BleepingComputer The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. […] Read original

DIVD says Zammad zero-days enabled AI-driven network breach Source: BleepingComputer The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. […] Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original