Tracked topic
CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability.
Zimbra urges customers to patch critical web client XSS flaw By Sergiu Gatlan July 10, 2026 07:47 AM The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite. …
… Zimbra's software has becomes a target for malware execution Since older versions of Zimbra's Classic Web Client are considered highly vulnerable, all users and organizations are advised to upgrade to Zimbra version 10.1.19 as soon as possible. …
… Zimbra "Daffodil" 10.1.19 includes a fix for a stored cross-site scripting XSS vulnerability that could be exploited to compromise customers' machines through Zimbra's Classic Web Client.Read Entire Article
… Diverse internationale Behörden drängen laut CISA-Aufzählung Admins, die Zimbra-Software zu aktualisieren. Zudem liefert die CISA eine Liste mit Hinweisen auf erfolgreiche Angriffe Indicators of Compromise, IOC . Aktuell haben die Entwickler Zimbra 10.1.20 veröffentlicht. …
… Get the whitepaper Related Articles: SAP fixes critical flaws in NetWeaver and Commerce Cloud CISA warns of actively exploited RCE flaws in Joomla extensions Hackers exploit critical auth bypass in Gitea Docker image Zimbra urges customers to patch critical web client XSS flaw Google: Hackers explo… …
… Analysis revealed a “suite of subtle persistence mechanisms” and revealed it to be an evolution of the ZimReaper malware observed in the attacks against Zimbra email servers. “OWAReaper is executed entirely in the Outlook Web Access OWA reading pane. …
… To compromise their targets, the Russian hacking group known as Laundry Bear and Void Blizzard exploited a previously unknown flaw in Zimbra, an email platform used by governments and other organizations. …
… Dabei ging es primär um die Ausnutzung einer Sicherheitslücke in der Kollaborationssoftware Zimbra CVE-2025-66376 öffnet im neuen Fenster . …
… Get the whitepaper Related Articles: Zimbra urges customers to patch critical web client XSS flaw Ukraine's army targeted in new charity-themed malware campaign Spain arrests suspected member of pro-Russian hacktivist groups Over 900 Oracle E-Business instances exposed to ongoing attacks U.S. offer… …