Compromises involving software packages, dependencies, build systems, extensions, updates, installers, service providers, and other trusted distribution paths.
Immediate priority must be given to patching Zimbra Collaboration Suite following its addition to the CISA Known Exploited Vulnerabilities catalog. The broader threat landscape is characterized by sophisticated identity bypasses using passkeys and high-impact endpoint threats leveraging signed Microsoft drivers.
Read this editionImmediate priority must be given to patching Microsoft Entra ID and GitLab due to confirmed active exploitation of critical flaws. The broader landscape shows a surge in supply chain attacks targeting Rust developers and sophisticated identity hijacking by state actors.
Read this editionImmediate priority is the active exploitation of a critical RCE in Zimbra Collaboration Suite. The broader landscape shows high-severity vulnerabilities in Citrix and Cisco edge devices, alongside AI-driven threats targeting industrial controllers.
Read this editionImmediate priority must be given to patching the Ray framework and Windows Task Host due to confirmed active exploitation by ransomware gangs and other actors. The broader landscape shows a critical trend of unauthenticated RCEs in developer tools like GitLab and WordPress, alongside emerging AI-agent based breaches.
Read this edition