https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Synacor.Sun, 26 Jul 2026 22:32:51 GMThttps://risky.biz/risky-bulletin-western-cyber-agencies-warn-of-russian-hacks-of-zimbra-serverscst-3142Western cybersecurity and intelligence agencies issued a joint warning on Thursday about a Russian hacking campaign targeting Zimbra email servers since at least July 2024. The campaign exploited CVE-2025-66376, a stored XSS vulnerability in the Zimbra webmail client's CSS @import feature, which was patched in November but remains under active attack. The malicious code loads a tool called Ulej to harvest credentials, session tokens, backup two-factor authentication codes, saved passwords, and up to 90 days of email contents.Fri, 24 Jul 2026 03:31:32 GMThttps://bleepingcomputer.com/news/security/russian-hackers-exploit-zimbra-zero-click-flaw-for-email-theftcst-3098The Russian state-sponsored group Laundry Bear (also tracked as Void Blizzard) is exploiting a patched Zimbra Collaboration vulnerability alongside phishing attacks to steal email from targeted organizations. CISA has issued a warning about this active exploitation campaign. The vulnerability allows attackers to gain unauthorized access to email systems without user interaction.Thu, 23 Jul 2026 16:49:27 GMThttps://recordedfuture.com/blog/march-2026-cve-landscapecst-1981Insikt Group identified 31 high-impact vulnerabilities actively exploited in March 2026, with 29 rated as very critical. The affected products span major vendors including Cisco, Microsoft, Google, ConnectWise, Citrix, and others, with Microsoft and Apple accounting for approximately 32% of the total. Notable findings include the Interlock ransomware group exploiting a Cisco Firewall Management Center zero-day, the continued exploitation of a nine-year-old Hikvision vulnerability, and public proof-of-concept exploits available for 10 of the 31 vulnerabilities.Mon, 13 Apr 2026 00:00:00 GMT