News on this topic
Zimbra patched a flaw that let hackers hijack accounts just by sending an email: Zimbra owner Synacor has released a new version of its collaboration software ...
techspot.com/news/113097-zimbra-patched-flaw-hackers-hijack-accounts-sending-email.html
Zimbra urges customers to patch critical web client XSS flaw: The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic ...
bleepingcomputer.com/news/security/zimbra-urges-customers-to-patch-critical-web-client-xss-flaw/

Similar to This
Previous
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to ...
bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/

Attackers have been exploiting critical Zimbra flaw to steal emails: A simple email gives the attackers the ability to remotely inject OS commands.
arstechnica.com/security/2026/09/attackers-have-been-exploiting-critical-zimbra-flaw-to-steal-emails/

Zimbra zero-day exploit exposes mail servers to attack, Microsoft warns: Unauthenticated command injection in the SNMP notification path lets hackers steal ...
neowin.net/news/zimbra-zero-day-exploit-exposes-mail-servers-to-attack-microsoft-warns/

Hackers breached over 270 Zimbra servers in ongoing attacks: Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks ...
bleepingcomputer.com/news/security/hackers-breached-over-270-zimbra-servers-in-ongoing-attacks/

CISA orders urgent patching of actively exploited Zimbra flaw: The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S ...
bleepingcomputer.com/news/security/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw/

Critical Zimbra RCE flaw now actively exploited in attacks: CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun ...
bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-now-actively-exploited-in-attacks/

Russian spies take their half-click email attack from Zimbra to Outlook: Opening a booby-trapped message unleashes a browser implant that can survive password ...
theregister.com/security/2026/07/30/russian-spies-take-their-half-click-email-attack-from-zimbra-to-outlook/5281033

Russian attackers exploit zero-click vulnerability in Zimbra: Russian attackers have been targeting Western governments and institutions through a zero-click ...
heise.de/news/Russische-Angreifer-missbrauchen-Zero-Click-Luecke-in-Zimbra-11376873.html

Year-long Russian attacks infect users as soon as they look at an email: Phishing for dummies
theregister.com/patches/2026/07/23/year-long-russian-attacks-infect-users-as-soon-as-they-look-at-an-email/5277358

US and allies say Russian hackers stole emails without social engineering: The United States and more than a dozen allied nations said on Thursday that Russian ...
reuters.com/legal/government/us-allies-say-russian-hackers-stole-emails-without-social-engineering-2026-07-23/

Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks: Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing ...
bleepingcomputer.com/news/security/cisa-says-zimbra-flaw-now-exploited-over-10k-servers-vulnerable/

Attacks on Cisco SD-WAN, Zimbra, TeamCity, PaperCut, and more observed: The US IT security agency CISA is currently warning of attacks on Cisco SD-WAN, Zimbra ...
heise.de/news/Angriffe-auf-Cisco-SD-WAN-Zimbra-TeamCity-PaperCut-und-mehr-beobachtet-11265225.html

Russian hackers exploit Zimbra flaw in Ukrainian govt attacks: Hackers part of APT28, a state-backed threat group linked to Russia's military intelligence ...
bleepingcomputer.com/news/security/russian-apt28-military-hackers-exploit-zimbra-flaw-in-ukrainian-govt-attacks/

Hackers exploited Zimbra flaw as zero-day using iCalendar files: Researchers monitoring for larger .ICS calendar attachments found that a flaw in Zimbra ...
bleepingcomputer.com/news/security/hackers-exploited-zimbra-flaw-as-zero-day-using-icalendar-files/

Spies hack high-value mail servers using an exploit from yesteryear: Attacks spilled contacts and emails from targeted accounts.
arstechnica.com/security/2025/05/spies-hack-high-value-mail-servers-using-an-exploit-from-yesteryear/

Next
