🛡️ BREAKING: Russian Threat Actors Actively Exploiting Zimbra Zero-Click Vulnerability to Steal Emails and 2FA Codes
Published Friday, July 24, 2026 at 09:10 AM PT BLUF: Russian state-backed threat actors are actively exploiting a zero-click vulnerability in Zimbra Collaboration Suite to access emails and multi-factor authentication codes from unpatched servers worldwide. Targeted organizations should assume compromise if running unpatched Zimbra and take immediate containment action. DETAILS Attack Vector: Zero-click (or near-zero-click) exploitation requiring no user interaction — attackers bypass standard security warnings and phishing-resistance controls by directly compromising the mail server. ...