Russian threat actors linked to the exploitation of a Zimbra vulnerability have been observed exploiting CVE-2026-42897, a cross-site scripting (XSS) flaw in…
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
A JavaScript payload deployed via half-click exploits targeting Zimbra, capable of harvesting 90 days of victim email and other data, used by…
A Russian state-sponsored espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal emails, passwords, and two-factor authentication recovery codes…
A cross-site scripting (XSS) flaw in Zimbra's Classic UI exploited by Laundry Bear to deploy the ZimReaper payload, harvesting email data from…