Microsoft Threat Intelligence
Microsoft tracks Zimbra flaw CVE-2026-73570 exploited in the wild
Microsoft Threat Intelligence says attackers used a crafted email to run commands on internet-facing Zimbra servers, deploying web shells and stealing authentication keys.
Microsoft
Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.
Microsoft
Microsoft details NeedyMantis malware in targeted intrusions
Microsoft Threat Intelligence says the modular post-compromise framework has hit telecom firms, universities, nonprofits and government contractors since at least October 2025.
Microsoft