Multiple enterprise software vulnerabilities, including unpatched Zimbra instances and actively targeted NetScaler flaws, dominated the cybersecurity landscape over the past week.
Security researchers and infrastructure monitors reported a surge in active exploitation targeting enterprise collaboration and networking platforms. According to telemetry shared by the Shadowserver Foundation, at least 274 internet-facing Zimbra instances have been compromised by unknown attackers utilizing the vulnerability tracked as CVE-2026-73570. Administrators have been urged to apply available patches immediately to prevent complete server takeovers.
In addition to the Zimbra campaign, the Cybersecurity and Infrastructure Security Agency (CISA) added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Notably, this update includes CVE-2026-8452, a previously patched flaw affecting Citrix NetScaler ADC and Gateway appliances that is now seeing active exploitation in the wild. Concurrently, CISA confirmed that attackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability impacting the Gitea Git platform.
Supply chain security and state-sponsored cyber operations also drew significant attention from investigators. The Department of Justice and the FBI announced the disruption of a China-linked hacking network, successfully seizing domains tied to malicious tools utilized against U.S. government entities including NASA, the Department of Justice, and the U.S. Senate. Meanwhile, open-source software supply chain risks gained prominence following the arrest of two individuals in Western Australia allegedly linked to TeamPCP, a cybercrime group accused of planting malicious code in shared repositories.
Enterprise risk management discussions increasingly focused on internal security practices and development lifecycles. Discussing production data usage in testing environments, Erika Dean, CISO at Tricentis, emphasized the ongoing necessity of eliminating live data from staging platforms, noting, “Production data in testing is still common, and keeping it out of test environments remains a priority as alternatives improve.”
Physical infrastructure and corporate networks faced substantial disruptions as well. A cyberattack forced a major network outage at medical technology firm Boston Scientific, impacting global operations, while Manchester Airports Group confirmed a data breach resulting in the theft of customer records from three UK airports.