#Email Security
All CosmicBytez Labs articles tagged #Email Security, across news, security advisories, how-to guides, and projects.
- News
Microsoft Tracks Active Zimbra CVE-2026-73570 Exploitation: Web Shells, Root Escalation, Stolen Secrets
Microsoft found attackers exploiting Zimbra flaw CVE-2026-73570 to drop JSP web shells, escalate to root via PAM, and steal mailbox auth secrets.
- News
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
CVE-2026-104286, a critical FortiMail path traversal flaw (CVSS 9.8), is under active exploitation. No patch yet — Fortinet urges workarounds now.
- Security
CVE-2026-102095: Critical Unauthenticated SSRF in Kiteworks Email Protection Gateway
CVSS 9.1 unauthenticated SSRF lets crafted email content make Kiteworks's gateway fetch internal URLs; fixed before version 9.5.0.
- Security
CVE-2026-102102: Critical Unauthenticated SSRF in Kiteworks Email Protection Gateway
Unauthenticated SSRF (CVSS 9.1) in Kiteworks Email Protection Gateway lets attackers force the gateway to fetch internal resources via certificate validation.
- Project
DMARC Aggregate Report Monitoring with ParseDMARC, Elasticsearch, and Grafana
Deploy an open-source pipeline that pulls DMARC aggregate reports from a mailbox, indexes them in Elasticsearch, and visualizes spoofing attempts in Grafana.
- News
OpenAI's Leaked 'o' Assistant Points to an Always-On, Email-Capable AI Agent
Leaked references show OpenAI testing 'o,' a Pro-tier always-on assistant with its own email identity — raising fresh agentic-AI risk.
- News
Cisco Warns Customers of Actively Exploited Zero-Day in Email Gateways
Cisco confirms CVE-2026-76461, a critical unauthenticated SQL injection in Secure Email Gateway, was exploited as a zero-day before patches shipped.
- News
Cisco Secure Email Gateway Zero-Day Exploited to Execute Root Commands
CVE-2026-76461 (CVSS 9.8) lets attackers send crafted emails with malicious SQL to gain root RCE on Cisco Secure Email Gateway; CISA gives feds 3 days.
- Security
CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco Secure Email Gateway has a critical, unauthenticated SQL injection (CVSS 9.8) enabling root code execution. CISA KEV-listed as actively exploited.
- News
Phishing Campaign Used Invisible Unicode Tag Characters to Slip Past Filters
Microsoft found a high-volume phishing operation hiding invisible Unicode tag characters inside words like 'funding' to dodge keyword-matching filters.
- Security
CVE-2026-42007: Critical Use-After-Free in Dovecot's Sieve Editheader Extension
Dovecot's Sieve editheader extension has a critical use-after-free (CVSS 9.1) letting authenticated users corrupt memory during mail delivery.
- Security
CVE-2026-82082: Critical Unauthenticated OS Command Injection in NUMail
Unauthenticated OS command injection in Green-Computing's NUMail lets remote attackers run arbitrary commands on the mail server. CVSS 9.8.
- Security
CVE-2026-73570: Zimbra ZCS OS Command Injection via SMTP
Zimbra Collaboration Suite contains a critical unauthenticated OS command injection flaw allowing RCE as the Zimbra user via crafted SMTP requests.
- News
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
CVE-2026-73570, a CVSS 8.9 command injection flaw in Zimbra Collaboration, is actively exploited in the wild for unauthenticated RCE via SNMP.
- News
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
PortSwigger researcher Gareth Heyes demonstrated at Black Hat USA 2026 that CSS and HTML within emails can escape message boundaries to capture typed...
- News
Russian APT 'Laundry Bear' Exploited Zimbra Zero-Day with Half-Click Email Attack
Russia-backed Laundry Bear (Void Blizzard/TA488) exploited CVE-2025-66376 — a stored XSS flaw in Zimbra's Classic UI — to compromise US, Ukrainian, and...
- News
AegisAI Raises $36 Million for AI-Powered Email Security
AegisAI has closed a $36 million funding round led by Battery Ventures, Accel, and Foundation Capital, bringing the company's total raise to $49 million...
- News
AegisAI Raises $36 Million to Fight AI-Crafted Phishing with AI Defenses
AegisAI has closed a $36M Series A, bringing total funding to $49M, to scale its AI agent-based email security platform purpose-built to counter the rise...
- News
Russian Laundry Bear Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group spent months silently reading Western mailboxes through a zero-click XSS flaw in Zimbra's webmail client —...
- News
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
A critical stored XSS vulnerability in Zimbra's Classic Web Client allows attackers to deliver specially crafted emails that execute arbitrary code within...
- News
Zimbra Urges Customers to Patch Critical Web Client XSS Flaw Exploited in the Wild
CVE-2025-27915, a stored XSS vulnerability in Zimbra's Classic Web Client, was exploited as a zero-day before public disclosure. Attackers used malicious...
- News
Major Japanese Telco Cyberattack Exposes 12 Million Email Accounts
A cyberattack on a major Japanese telecommunications provider compromised an email management system affecting five ISPs, exposing the accounts, webmail...
- News
Data Breach Exposes Up to 14.2 Million Email Logins at Six ISPs
Japanese telecom giant KDDI Corporation disclosed a data breach affecting up to 14.22 million email accounts across six ISPs — including Nifty, Biglobe,...
- News
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE
Critical security vulnerabilities in SEPPMail Secure E-Mail Gateway — an enterprise email security appliance — could allow attackers to achieve remote...
- News
Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild
Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions actively being targeted...
- News
Microsoft Warns of Exchange Zero-Day Flaw Exploited in Attacks
Microsoft shared mitigations for a high-severity Exchange Server vulnerability being actively exploited that allows threat actors to execute arbitrary...
- News
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
Exim has released security updates to patch a severe vulnerability affecting GnuTLS-compiled builds of the world's most widely deployed mail transfer...
- Security
CVE-2026-42193: Plunk Email Platform SNS Webhook Forgery
A critical unauthenticated vulnerability in Plunk, the open-source AWS SES email platform, allows attackers to forge Amazon SNS webhook payloads without...
- News
Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks
CISA has confirmed that a cross-site scripting vulnerability in Zimbra Collaboration Suite is being actively exploited in the wild, with over 10,000...
- HOWTO
Email Authentication: Deploying SPF, DKIM, and DMARC to Stop Spoofing
Step-by-step guide to implementing SPF, DKIM, and DMARC on your domain — eliminate email spoofing, prevent phishing, and gain full visibility into who...
- Security
Microsoft Exchange Server SSRF to RCE Chain Actively
A server-side request forgery vulnerability in Exchange Server is being chained with deserialization flaws for unauthenticated remote code execution....
- HOWTO
Exchange Online Security Hardening for Enterprise
Secure your Exchange Online environment with mail flow rules, anti-spam policies, DMARC enforcement, admin audit controls, and mailbox permission hardening.