Cybersecurity articles tagged #Zimbra on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/zimbra-cve-2026-73570-actively-exploited-patch-nowhttps://runtimerebel.com/blog/zimbra-cve-2026-73570-actively-exploited-patch-nowActive exploitation targets Zimbra servers via CVE-2026-73570, a high-severity flaw allowing unauthenticated RCE. Patch to v10.1.20 now.Thu, 20 Aug 2026 16:24:30 GMTZimbraExploitationRemote Code ExecutionCVE-2026-73570Zimbra Collaboration Suitehttps://runtimerebel.com/blog/cve-2025-66376-apt28-exploits-zimbra-zero-click-for-espionagehttps://runtimerebel.com/blog/cve-2025-66376-apt28-exploits-zimbra-zero-click-for-espionageRussian state-sponsored actors exploit a zero-click Zimbra vulnerability (CVE-2025-66376) to exfiltrate sensitive webmail data from targeted organizations.Sat, 08 Aug 2026 08:33:35 GMTCVE-2025-66376ZimbraCyber EspionageZero ClickPhishinghttps://runtimerebel.com/blog/multi-threat-brief-ai-malware-zimbra-exploits-linux-kernel-flawshttps://runtimerebel.com/blog/multi-threat-brief-ai-malware-zimbra-exploits-linux-kernel-flawsAnalysis of recent threats including DolphinX AI malware, state-sponsored Zimbra exploits, Siemens industrial switch vulnerabilities, and 400 Linux kernel flaws.Fri, 24 Jul 2026 17:42:24 GMTDolphinXEmerald SleetWinter VivernUNC4841ZimbraLinux KernelSiemens ROX IIIndustrial Control SystemsAPTRansomwareLockBithttps://runtimerebel.com/blog/zimbra-zero-day-exploited-by-laundry-bear-against-us-ukrainehttps://runtimerebel.com/blog/zimbra-zero-day-exploited-by-laundry-bear-against-us-ukraineRussian state-sponsored group 'Laundry Bear' exploits a Zimbra zero-day via 'half-click' phishing, targeting US and Ukrainian entities for credential theft and backdoor…Fri, 24 Jul 2026 02:47:14 GMTLaundry BearZimbraZero-DayPhishingUSUkraineState Sponsoredhttps://runtimerebel.com/blog/russian-apt-exploits-zimbra-zero-day-to-exfiltrate-mail-and-2fa-codeshttps://runtimerebel.com/blog/russian-apt-exploits-zimbra-zero-day-to-exfiltrate-mail-and-2fa-codesRussian state-supported actors leveraged a Zimbra Zero-Day to steal 90 days of email history and bypass security by exfiltrating 2FA recovery codes.Thu, 23 Jul 2026 21:06:08 GMTZimbraRussian EspionageAPT28Zero-DayEmail Securityhttps://runtimerebel.com/blog/zimbra-classic-web-client-stored-xss-leads-to-session-hijackinghttps://runtimerebel.com/blog/zimbra-classic-web-client-stored-xss-leads-to-session-hijackingZimbra warns of a critical stored XSS vulnerability in the Classic Web Client allowing attackers to execute malicious code via crafted emails.Sat, 11 Jul 2026 09:39:05 GMTZimbraStored XssWebmail SecuritySession Hijackinghttps://runtimerebel.com/blog/zimbra-classic-web-client-xss-critical-flaw-under-active-exploithttps://runtimerebel.com/blog/zimbra-classic-web-client-xss-critical-flaw-under-active-exploitA critical XSS vulnerability in Zimbra Classic Web Client is under active exploitation, allowing credential theft and session hijacking.Fri, 10 Jul 2026 14:31:43 GMTZimbraXSSClassic Web ClientZimbra Collaboration SuiteActive Exploitationhttps://runtimerebel.com/blog/zimbra-xss-attacks-over-10000-servers-vulnerable-patch-nowhttps://runtimerebel.com/blog/zimbra-xss-attacks-over-10000-servers-vulnerable-patch-nowOngoing cross-site scripting (XSS) attacks exploit a flaw in Zimbra Collaboration Suite (ZCS), leaving over 10,000 online servers vulnerable.Fri, 24 Apr 2026 16:28:18 GMTZimbraZCSXSSCross Site ScriptingEmail ServerVulnerabilityhttps://runtimerebel.com/blog/cisa-kev-expansion-exploit-guidance-for-cisco-kentico-and-zimbrahttps://runtimerebel.com/blog/cisa-kev-expansion-exploit-guidance-for-cisco-kentico-and-zimbraCISA adds 8 vulnerabilities to the KEV catalog, including critical flaws in Cisco ASA and Zimbra. Analyze technical impact and remediation requirements.Tue, 21 Apr 2026 12:33:32 GMTCVE-2024-20481CVE-2024-45519CVE-2024-29847CiscoZimbraIvantihttps://runtimerebel.com/blog/cisa-kev-update-eight-new-vulnerabilities-in-cisco-teamcity-and-zimbrahttps://runtimerebel.com/blog/cisa-kev-update-eight-new-vulnerabilities-in-cisco-teamcity-and-zimbraCISA adds eight vulnerabilities to the KEV Catalog, including flaws in Cisco SD-WAN and JetBrains TeamCity, requiring immediate federal agency remediation.Tue, 21 Apr 2026 08:44:49 GMTCISA KEVCiscoTeamCityCVE-2026-20122PaperCutZimbrahttps://runtimerebel.com/blog/apt28-targets-ukraine-via-cve-2024-45519-zimbra-exploithttps://runtimerebel.com/blog/apt28-targets-ukraine-via-cve-2024-45519-zimbra-exploitRussian APT28 hackers exploit CVE-2024-45519 in Zimbra Collaboration Suite to target Ukrainian government entities via malicious email-based command injection.Thu, 19 Mar 2026 16:25:10 GMTAPT28ZimbraCVE-2024-45519UkraineSSSCIPGRUhttps://runtimerebel.com/blog/cisa-kev-update-cve-2025-66376-zimbra-and-sharepoint-exploitshttps://runtimerebel.com/blog/cisa-kev-update-cve-2025-66376-zimbra-and-sharepoint-exploitsCISA warns of active exploitation for Zimbra CVE-2025-66376, SharePoint flaws, and Cisco zero-days used in ransomware attacks. Secure your systems now.Thu, 19 Mar 2026 08:18:30 GMTCVE-2025-66376ZimbraSharePointCISA KEVCiscoRansomwarehttps://runtimerebel.com/blog/cve-2024-4510-zimbra-collaboration-suite-xss-exploitation-guidehttps://runtimerebel.com/blog/cve-2024-4510-zimbra-collaboration-suite-xss-exploitation-guideCISA adds CVE-2024-4510 to the KEV catalog following active exploitation of a Zimbra Collaboration Suite XSS vulnerability. Patch ZCS version 9.0.0 today.Wed, 18 Mar 2026 20:16:14 GMTCVE-2024-4510ZimbraXSSCISA KEVMail Security