Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

A zero-day flaw in the Zimbra Collaboration email software was exploited by four different groups in real-world attacks to pilfer email data, user credentials, and authentication tokens.
"Most of this activity occurred after the initial fix became public on GitHub," Google Threat Analysis Group (TAG) said in a report shared with The Hacker News.
The flaw, tracked as CVE-2023-37580 (CVSS score:

analysis attacks authentication collaboration credentials data email email data exploited fix flaw github google google threat analysis group hacker hacker groups public real report software tag threat threat analysis threat analysis group tokens world zero-day zero-day flaw zimbra