NewsNTech
Microsoft has warned that hackers are actively exploiting a critical vulnerability in the Zimbra Collaboration Suite to steal email backups and authentication credentials from vulnerable organizations.
The flaw, identified as CVE-2026-73570, allows attackers to remotely issue operating system commands without requiring any form of authentication.
Synacor, the maintainer of Zimbra, released a patch for the issue on July 20. However, the company did not disclose the vulnerability to the public until more than three weeks after the patch was available.
Following the disclosure, the Shadowserver Foundation reported last week that its network scans identified 274 separate instances of the Zimbra Collaboration Suite that had already been compromised.
Keep reading