Microsoft Defender for Endpoint
Microsoft tracks Zimbra flaw CVE-2026-73570 exploited in the wild
Microsoft Threat Intelligence says attackers used a crafted email to run commands on internet-facing Zimbra servers, deploying web shells and stealing authentication keys.
Microsoft
Microsoft: Phishing Campaigns Abuse MSP360 RMM for Persistent Access
Microsoft Defender Experts says attackers used fake meeting and PDF lures to install legitimate MSP360 remote management software, then added ScreenConnect as a backup channel.
Microsoft
Microsoft details NeedyMantis malware in targeted intrusions
Microsoft Threat Intelligence says the modular post-compromise framework has hit telecom firms, universities, nonprofits and government contractors since at least October 2025.
Microsoft