Vetted SecOps Rockwell Automation has patched a high-severity path traversal vulnerability (CVE-2026-11917) in ThinManager. Authenticated attackers can exploit API file-save flaws to write arbitrary files to restricted directories.
CISA advisory ICSA-26-204-06 details critical buffer overflow and NULL pointer dereference vulnerabilities in MZ Automation libIEC61850 versions 1.0.0 through 1.6.1, allowing remote code execution and denial of service across energy, manufacturing, and transportation control networks.
Russian state-supported threat actor LAUNDRY BEAR is exploiting CVE-2025-66376 in Zimbra Collaboration Suite to conduct zero-click webmail exfiltration targeting government and defense entities.
Exploitation Overview: Russian APT LAUNDRY BEAR Targets Zimbra Webmail A joint cybersecurity advisory released by CISA, NSA, FBI, and international intelligence partners details ongoing espionage campaigns by Russian state-supported threat actor LAUNDRY BEAR (also tracked as Void Blizzard, TA488, and CL-STA-1114). Operating since at least July 2025, the group actively targets Zimbra Collaboration Suite (ZCS) … Read more
