#Zimbra Collaboration Suite

#Zimbra Collaboration Suite

Four separate cyberattack groups have exploited a zero-day security vulnerability in the Zimbra Collaboration Suite to steal email data and credentials.

The attacks targeted government organizations in Greece, Moldova, Tunisia, Vietnam, and Pakistan.

The vulnerability was patched in July, but the attacks began before the patch was available. [ more ]

Four separate cyberattack groups have exploited a zero-day security vulnerability in the Zimbra Collaboration Suite to steal email data and credentials.

The attacks targeted government organizations in Greece, Moldova, Tunisia, Vietnam, and Pakistan.

The vulnerability was patched in July, but the attacks began before the patch was available. [ more ]

A Zimbra Collaboration Suite zero-day vulnerability was exploited to steal email data from government organizations in multiple countries.

The exploit, tracked as CVE-2023-37580, is a reflected cross-site scripting (XSS) bug that requires the user to click on a malicious link.

Google's Threat Analysis Group observed multiple campaigns exploiting the zero-day and linked the attacks to a Russian APT known as Winter Vivern. [ more ]

A Zimbra Collaboration Suite zero-day vulnerability was exploited to steal email data from government organizations in multiple countries.

The exploit, tracked as CVE-2023-37580, is a reflected cross-site scripting (XSS) bug that requires the user to click on a malicious link.

Google's Threat Analysis Group observed multiple campaigns exploiting the zero-day and linked the attacks to a Russian APT known as Winter Vivern. [ more ]