Terms

Reverse Shell

Follow the latest coverage, related explainers and connected technology stories.

Latest coverage

CN
Microsoft Detects Active Exploitation of an Undocumented Command Injection Vulnerability in Zimbra Servers

Microsoft Detects Active Exploitation of an Undocumented Command Injection Vulnerability in Zimbra Servers

Microsoft Threat Intelligence observed exploitation of CVE-2026-73570 in Internet-facing Zimbra servers, enabling unauthenticated remote command execution when specific components and settings were enabled. The attacks included planting backdoors, escalating privileges, moving between system nodes, and collecting email data and authentication material.

CN
Active Exploitation of a Critical Vulnerability in Sangoma Switchvox to Deploy Reverse Shells

Active Exploitation of a Critical Vulnerability in Sangoma Switchvox to Deploy Reverse Shells

Researchers are observing active exploitation of CVE-2026-9586 in the Sangoma Switchvox voice communications platform, a SQL injection vulnerability that requires no authentication and can lead to remote command execution. Sangoma issued a fix in version 8.4.0.2, while Horizon3 warned that most systems exposed to the internet are being targeted.