ATTACKERS HAVE BEEN EXPLOITING CRITICAL ZIMBRA FLAW TO STEAL EMAILS

Summary from the TLDR InfoSec newsletter

Attackers are exploiting CVE-2026-73570 in Zimbra Collaboration Suite. A crafted email can trigger unauthenticated OS command execution when zimbra-snmp and SNMP notifications are enabled, and Microsoft observed web shells, reverse shells, privilege escalation, remote-access tools, email backups, and credential collection. Shadowserver found 274 compromised instances.