Attackers have been exploiting critical Zimbra flaw to steal emails

Security news feed covering active exploitation of a critical Zimbra vulnerability for remote OS command injection and email theft, large-scale account compromise campaigns, exploit kits targeting Chrome and Windows, ClickFix social engineering, supply-chain and infrastructure attacks, data breaches, AI-agent and LLM security weaknesses, and emerging cryptographic risks. The most urgent item is the actively exploited Zimbra flaw, while several other reports indicate broad, evolving threats affecting enterprise systems, cloud accounts, endpoints, and AI platforms.