Tag
Attackers have been exploiting a critical unauthenticated command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite to steal email backups and credentials, with over 274 instances compromised despite a July patch. Microsoft disclosed active exploitation including web shells, reverse shells, and mailbox data exfiltration across multiple industries.