Nov. 16, 2023, 4:09 p.m. | (The Hacker News)

The Hacker News

A zero-day flaw in the Zimbra Collaboration email software was exploited by four different groups in real-world attacks to pilfer email data, user credentials, and authentication tokens.
"Most of this activity occurred after the initial fix became public on GitHub," Google Threat Analysis Group (TAG) said in a report shared with The Hacker News.
The flaw, tracked as CVE-2023-37580 (CVSS score:

analysis attacks authentication collaboration credentials data email email data exploited fix flaw github google google threat analysis group hacker hacker groups public real report software tag threat threat analysis threat analysis group tokens world zero-day zero-day flaw zimbra

Security Specialist

@ Protect Democracy | Remote, US

Information And Security Controller - Tram (UAE National)

@ Keolis | Dubaï, AE

Cybersecurity Engineer

@ Alstom Transport | Cairo, EG

IT Security Specialist (m/w/d) - Data Center & Cloud

@ CLAAS | Harsewinkel, NW, DE, 33428

Security Architect - Central Government sector

@ BAE Systems | London, GB

Project Cyber Security Manager

@ Alstom | Bangkok, TH