Threat actors have actively exploited a critical security vulnerability within the Zimbra Collaboration Suite (ZCS) to deploy web shells and gain unauthorized access to mailbox data, as detailed by the Microsoft Security Research team.
Reports mentioning Zimbra Collaboration Suite
Threat actors have successfully compromised over 270 Zimbra instances worldwide, exploiting a high-severity vulnerability in the Zimbra Collaboration Suite (ZCS) that allows for remote code execution. The ongoing attacks, first identified in late 2023, are actively targeting these servers, enabling…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive mandating that U.S. federal civilian executive branch agencies urgently patch a critical vulnerability affecting the Zimbra Collaboration Suite (ZCS).
CERT Polska, the Polish Computer Emergency Response Team, has issued a warning that attackers have commenced active exploitation of a critical vulnerability within the Zimbra Collaboration Suite (ZCS). This vulnerability, identified as a remote code execution (RCE) flaw, allows unauthorized…
A Russian state-sponsored espionage group successfully exploited a previously unknown vulnerability in Zimbra's webmail client for several months, gaining access to sensitive information within Western organizations. The exploitation allowed the attackers to exfiltrate the last 90 days of emails…