Russian hackers exploit Zimbra flaw in Ukrainian govt attacks (opens in new tab)

Sergiu Gatlan reports: Hackers part of APT28, a state-backed threat group linked to Russia&#8217;s military intelligence service (GRU), are exploiting a Zimbra Collaboration Suite (ZCS) vulnerability in attacks targeting Ukrainian government entities. This high-severity security flaw (tracked as CVE-2025-66376 and patched in early November) stems from a stored cross-site scripting (XSS) that unauthenticated attackers can exploit to gain remote...<img src="https://analytics.hitsaru.com/piwik.p...