This week’s release introduces new detections for CVE-2025-68645 and CVE-2025-31125. Key Findings CVE-2025-68645: A Local File Inclusion (LFI) vulnerability in the Webmail Classic UI of Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 allows unauthenticated remote attackers to craft requests to…

A new Allow clientless access setting makes it easier to enable access to private self-hosted applications without a device client. Previously, to provide clientless access to a private hostname or IP, you had to create a separate bookmark application pointing…

You can now assign Access policies to bookmark applications. This lets you control which users see a bookmark in the App Launcher based on identity, device posture, and other policy rules. Previously, bookmark applications were visible to all users in…