Russian hackers exploit Zimbra zero-click flaw for email theft

Russian hackers exploit Zimbra zero-click flaw for email theft Source: BleepingComputer CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability. […] Read original

Russian hackers exploit Zimbra zero-click flaw for email theft

Russian hackers exploit Zimbra zero-click flaw for email theft Source: BleepingComputer CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability. […] Read original

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files Source: The Hacker News Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic’s Claude Cowork that makes it possible to break out of the confines of a Linux virtual machine (VM) within which the agent runs to read or write files anywhere on the Mac. Accomplish AI, which shared details of the Read original

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files Source: The Hacker News Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic’s Claude Cowork that makes it possible to break out of the confines of a Linux virtual machine (VM) within which the agent runs to read or write files anywhere on the Mac. Accomplish AI, which shared details of the Read original

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files Source: The Hacker News Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic’s Claude Cowork that makes it possible to break out of the confines of a Linux virtual machine (VM) within which the agent runs to read or write files anywhere on the Mac. Accomplish AI, which shared details of the Read original

Check Point warns of SmartConsole zero-day exploited in attacks

Check Point warns of SmartConsole zero-day exploited in attacks Source: BleepingComputer Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company’s SmartConsole graphical user interface (GUI) admin panel. […] Read original

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access Source: The Hacker News Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is Read original

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access Source: The Hacker News Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is Read original

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access Source: The Hacker News Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is Read original

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access Source: The Hacker News Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is Read original