AI Weekly Malaysia

A developer shares a multi-month update after migrating from Gmail to Fastmail, finding the switch successful. Key tactic: using subdomain addressing (e.g., newsletters@sub.domain.com) so Fastmail auto-files emails into matching folders without manual rules, which proved better than Gmail's auto-sorting. They also note Fastmail supports up to ~100 domains per account, and that freshly registered custom domains may get greylisted by recipient email providers.

Why: If you run a custom domain for email, subdomain addressing is a concrete organization strategy worth testing — it eliminates rule-creation whack-a-mole. Also be aware that newly registered domains face greylisting, so register and warm up your domain well before relying on it for transactional or contact email.

A patched Zimbra Collaboration (ZCS) flaw, CVE-2026-73570 (CVSS 8.9), is under active exploitation per CERT Polska. The command injection vulnerability allows unauthenticated remote code execution when the optional zimbra-snmp package is installed and SNMP notifications are enabled, affecting versions before 10.1.20.

Why: If you run Zimbra Collaboration with the zimbra-snmp package enabled, patch to 10.1.20 immediately and check /var/log/zimbra.log for suspicious service restarts and files in /opt/zimbra/jetty/webapps/, /opt/zimbra/jetty_base/webapps/, and /tmp/ from the last 30 days. For most of the audience not running Zimbra, this has no direct action.