Today's briefing prioritizes exploited Zimbra, Oracle, and GitLab flaws; critical identity bypasses; exposed router control; targeted Spring fixes; automotive updater abuse; long-lived AWS keys; and npm-mirror phishing infrastructure.