email-security

2 articles · newest first

Rows of server racks in a data center representing an email server infrastructure

zimbra patched this bug in july. hackers are breaking into inboxes with it right now

CERT Polska is warning that attackers are actively exploiting an unauthenticated command-injection bug in Zimbra's SNMP monitoring component — one Zimbra quietly fixed five weeks ago, in version 10.1.20.

Priya Nair · Aug 22 · 6 min

Person checking an email inbox on a laptop in an office

Software

hackers showed microsoft exactly how to read every inbox on your exchange server — live, at a hacking contest

CVE-2026-62911 only scores an 8.0, but it came with working exploit code demonstrated at Pwn2Own Berlin — and it doesn't stop at one mailbox.

Priya Nair · Aug 17 · 7 min