zimbra News Articles

Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unpatched Zimbra servers are falling to CVE-2026-73570

4 weeks ago

Exploited RCE Flaws and Infrastructure Attacks Define this Cybersecurity Week in August 2026 | eSecurity Planet

Weekly summary of Cybersecurity Insider newsletters for August 2026.

1 month ago

274 Zimbra Servers Compromised, 8,200 Unpatched

Attackers exploited CVE-2026-73570 to compromise 274 Zimbra servers, while 8,200 systems remain unpatched. Learn what administrators should check.

1 month ago

Hackers have breached hundreds of Zimbra servers, despite a patch having been available for weeks

The flaw allows attackers to trigger cross-site scripting, sensitive information disclosure, security restriction bypass, and remote code execution

1 month ago

Zimbra SNMP flaw actively exploited, 274 servers hit

CVE-2026-73570 is under active exploitation, and 274 Zimbra mail servers are already compromised. Here is what changed, and what admins should check now.

1 month ago

Hackers breached over 270 Zimbra servers in ongoing attacks

Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability.

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks - Help Net Security

At least 274 internet-facing Zimbra instances have been compromised by unknown attackers via CVE-2026-73570.

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

CISA issued a 3-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.

Zimbra Collaboration Suite Vulnerability Actively Exploited in the Wild - IT Security News

2026-08-24 21:08 CERT Polska has warned that threat actors are actively exploiting CVE-2026-73570, a critical OS command-injection vulnerability in Zimbra Collaboration Suite that allows...

Zimbra Collaboration Suite Vulnerability Actively Exploited in the Wild

Threat Actors Exploit Critical Zimbra OS Command Injection Flaw (CVE-2026-73570) for Remote Code Execution.

CISA orders urgent patching of actively exploited Zimbra flaw

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) within three days.

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution - SwapUpdate

Ravie LakshmananAug 20, 2026Vulnerability / Email Security

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing unauthenticated RCE.

Critical Zimbra RCE flaw now actively exploited in attacks

CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS).

Hackers Target Zimbra Servers in Active Exploitation Campaign

CVE-2026-73570, a recently patched Zimbra Collaboration vulnerability that allows remote command execution, is being exploited in the wild.

Russian Hackers Exploit Zimbra 0-Day Against US, Ukraine Targets

A state-sponsored threat group, dubbed "Laundry Bear," sends "half-click" phishing emails that require a victim only to open or preview the message.

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Russian spies exploited CVE-2025-66376 in Zimbra to steal 90 days of mail, passwords, 2FA codes, and directories from Western targets.

Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks

Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw.

Russian hackers exploit Zimbra flaw in Ukrainian govt attacks

Hackers part of APT28, a state-backed threat group linked to Russia's military intelligence service (GRU), are exploiting a Zimbra Collaboration Suite (ZCS) vulnerability in attacks targeting Ukrainian government entities.

Russian hackers exploit Zimbra flaw in Ukrainian govt attacks

Hackers part of APT28, a state-backed threat group linked to Russia's military intelligence service (GRU), are exploiting a Zimbra Collaboration Suite (ZCS) vulnerability in attacks targeting Ukrainian government entities.

Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376

Russian APT exploits a critical XSS flaw in Zimbra, tracked as CVE-2025-66376, running scripts via HTML emails to target users in Ukraine.

CISA Adds Exploited Zimbra Collaboration Suite Flaw to Warning List

CISA has officially added a critical vulnerability affecting the Zimbra Collaboration Suite (ZCS) to its KVE catalog.

CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks

Interlock exploits CVE-2026-20131 zero-day since Jan 26, enabling root access on Cisco FMC, increasing ransomware risks.

U.S. CISA adds Microsoft SharePoint and Zimbra  flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SharePoint and Zimbra flaws to its Known Exploited Vulnerabilities catalog.