SecurityZimbra Flaw Exploited Before Disclosure
Microsoft says attackers probed and exploited a Zimbra command injection flaw in the window between patch release and public disclosure.
> Search
6 results for “zimbra”
Security
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
SecurityZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
SecurityZero-Click Exploits Hit Zimbra Users
A sophisticated campaign by the threat group Laundry Bear has bypassed user interaction to harvest sensitive government data.
SecurityZimbra Security Breach Exposes Critical Zero-Click Email Risks
A severe vulnerability in the Classic Web Client requires immediate patching to prevent unauthorized code execution via email.
SecurityThe Hidden Danger Lurking in Zimbra's Classic Web Client
A persistent cross-site scripting flaw in Zimbra's classic client underscores the relentless exploitation of enterprise email platforms.