Vulnerability

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Source: The Hacker News Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs. T Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Source: The Hacker News Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm Read original