Breach404
Back to Insights
Secure Software2 min readJuly 23, 2026

Russian hackers exploit Zimbra zero-click flaw for email theft

Russian state-sponsored hackers are actively exploiting a zero-click vulnerability in Zimbra Collaboration email servers combined with phishing attacks to steal email and compromise organizations. If your organization uses Zimbra, you should immediately v

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free