Attackers have been exploiting critical Zimbra flaw to steal emails
Summary
Ars Technica reports that attackers are exploiting a critical Zimbra Collaboration Suite vulnerability (CVE-2026-73570) to remotely inject OS commands via a crafted email targeting the SNMP notification path. Microsoft notes that attackers deployed web shells, reverse shells, privilege escalation, and accessed email backups and credentials after exploitation, with thousands of servers affected before a patch was disclosed. Upgrading to version 10.1.20 or later and applying hardening guidance is advised.