Zimbra zero-day exploited to steal government emails by four groups

Google TAG revealed that threat actors exploited a Zimbra Collaboration Suite zero-day (CVE-2023-37580) to steal emails from governments. Google Threat Analysis Group (TAG) researchers revealed that a zero-day vulnerability, tracked as CVE-2023-37580 (CVSS score: 6.1), in the Zimbra Collaboration email software was exploited by four different threat actors to steal email data, user credentials, and authentication tokens […]

analysis apt breaking news collaboration cve cve-2023-37580 cvss email emails exploited google google tag google threat analysis group government hacking information security news it information security pierluigi paganini researchers score software steal tag threat threat actors threat analysis threat analysis group vulnerability xss zero-day zero-day vulnerability zimbra zimbra collaboration suite