Organization
11 Interestana reports mention Zimbra, newest first. Each is summarised from the original reporting and links back to its publisher.
Threat actors have actively exploited a critical security vulnerability within the Zimbra Collaboration Suite (ZCS) to deploy web shells and gain unauthorized access to mailbox data, as detailed by the Microsoft Security Research team.
Threat actors have successfully compromised over 270 Zimbra instances worldwide, exploiting a high-severity vulnerability in the Zimbra Collaboration Suite (ZCS) that allows for remote code execution. The ongoing attacks, first identified in late 2023, are actively targeting these servers, enabling…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating that U.S. federal civilian executive branch agencies urgently patch a critical vulnerability affecting the Zimbra Collaboration Suite (ZCS).
A critical security vulnerability affecting Zimbra Collaboration (ZCS) has been actively exploited by malicious actors, according to a recent advisory from the Polish Computer Emergency Response Team (CERT Polska). The vulnerability, identified as CVE-2026-73570, carries a high CVSS score…
Russian threat actors, previously linked to exploiting a vulnerability in Zimbra, have been observed exploiting a separate vulnerability in Microsoft Outlook Web Access (OWA). This new campaign, which commenced on July 22, 2026, targets U.S. and European government entities, alongside…
A Russian state-sponsored espionage group successfully exploited a previously unknown vulnerability in Zimbra's webmail client for several months, gaining access to sensitive information within Western organizations. The exploitation allowed the attackers to exfiltrate the last 90 days of emails…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning this week detailing how the Russian state-sponsored hacking group Laundry Bear, also identified as Void Blizzard, is actively targeting organizations utilizing Zimbra Collaboration email servers.
Zimbra released security updates this week to address nine vulnerabilities affecting its Collaboration platform, including a critical command injection flaw within its Simple Network Management Protocol (SNMP) monitoring component. This vulnerability, identified as CVE-2024-29810, allows attackers to execute arbitrary commands…
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting its Classic Web Client. The flaw, described as a stored cross-site scripting (XSS) vulnerability, could allow specially crafted emails to execute malicious scripts within a user's…
Zimbra's security team issued an urgent directive on May 20, 2024, urging customers to immediately patch a critical vulnerability impacting the Classic Web Client. This flaw, identified as a cross-site scripting (XSS) vulnerability, affects users accessing the Zimbra Collaboration suite.