Tracked topic
… CERT Polska also asked admins to check their logs for suspicious activity, such as the Zimbra service restarting on its own, and for files created in the /opt/zimbra/jetty/webapps/, /opt/zimbra/jetty base/webapps/, and /tmp/ folders by user zimbra over the last 30 days. …
CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability.
Zimbra urges customers to patch critical web client XSS flaw By Sergiu Gatlan July 10, 2026 07:47 AM The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite. …
… Get the whitepaper Related Articles: SAP fixes critical flaws in NetWeaver and Commerce Cloud CISA warns of actively exploited RCE flaws in Joomla extensions Hackers exploit critical auth bypass in Gitea Docker image Zimbra urges customers to patch critical web client XSS flaw Google: Hackers explo… …
… Analysis revealed a “suite of subtle persistence mechanisms” and revealed it to be an evolution of the ZimReaper malware observed in the attacks against Zimbra email servers. “OWAReaper is executed entirely in the Outlook Web Access OWA reading pane. …
… Get the whitepaper Related Articles: Zimbra urges customers to patch critical web client XSS flaw Ukraine's army targeted in new charity-themed malware campaign Spain arrests suspected member of pro-Russian hacktivist groups Over 900 Oracle E-Business instances exposed to ongoing attacks U.S. offer… …
… Get the whitepaper Related Articles: Google loses final appeal to overturn €4.1 billion EU fine Google releases new privacy controls for activity history, personalization EU sanctions Russian GRU military hackers over cyberattacks Google: Hackers exploited Zimbra zero-day in attacks on govt orgs Ne… …
… Get the whitepaper Related Articles: Google: Hackers exploited Zimbra zero-day in attacks on govt orgs Hidden backdoor in Tenda router firmware grants admin access Microsoft patches RoguePlanet Defender zero-day vulnerability Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges Path t… …
… Zimbra released security updates for a critical XSS vulnerability affecting the Classic Web Client in the Zimbra Collaboration suite. …