Netcrook
11 Luglio 2026
When a Plugin Becomes a Backdoor: The New Pressure on CMS Defenders
A global alert around vulnerable content management systems shows how one outdated extension can turn a routine website into an incident response problem.
One Bad Email, One Trusted Browser: Zimbra’s Stored XSS Patch Exposes Webmail’s Weakest Link
A fix in Zimbra’s Classic Web Client shows how a single stored script payload can turn ordinary mailbox traffic into a session-level security problem.
When BIOS Passwords Live in Flash, the Lock Can Become a Map
A Dell firmware weakness tracked as CVE-2026-40639 shows how weak password encoding in BIOS storage can turn a physical device visit into offline credential recovery.
One Email, One Browser Session: Zimbra’s Classic Web Client Patch Exposes the Quiet Power of Stored XSS
A July patch for Zimbra Collaboration Suite closes a stored XSS flaw in the Classic Web Client, a reminder that email rendering bugs can turn trusted sessions into attack surfaces.
Zimbra’s Classic Mail Path Draws Fire Again as a Stored XSS Risk Emerges
A critical flaw in the Classic Web Client puts browser-rendered email content back under the microscope, where a single crafted message can become a session-level weapon.
When Firmware Keeps the Password: Dell BIOS Flaw Turns Physical Access into Offline Recovery
A BIOS storage weakness tracked as CVE-2026-40639 shows how a weakly protected secret in firmware can collapse the value of a BIOS password long before the login screen appears.