Microsoft patches 398 flaws; Zimbra exploitation deadline looms; Android cars compromised

This briefing details multiple high-priority threats: Microsoft issued patches for 398 vulnerabilities including at least one actively exploited flaw; Synacor Zimbra Collaboration Suite has a CISA KEV-listed command-injection (CVE-2026-73570) with a federal remediation deadline; a supply-chain compromise is infecting Android vehicle head units with proxy botnet/ad-fraud malware; ToxicPanda Android malware expanded capabilities and uses VPN permissions to evade detection; and a Snowflake extortionist pleaded guilty after targeting 165+ organizations. Immediate actions recommended include urgent patching (Zimbra by Aug 24, Windows within 48 hours), auditing affected systems, and monitoring for related indicators.