Russian hackers can steal emails without a click

A hacking group identified as Laundry Bear exploited a security vulnerability in unpatched Zimbra email servers to access and steal 90 days of stored emails and authentication data without requiring victims to click a malicious link. Zimbra servers with the unpatched flaw allowed attackers direct access to email systems. The vulnerability enabled extraction of email content and login credentials from affected organizations.

Next story