Hackers exploited Zimbra flaw as zero-day using iCalendar files

Published on October 5, 2025

Researchers monitoring for larger .ICS calendar attachments found that a flaw in Zimbra Collaboration Suite (ZCS) was used in zero-day attacks at the beginning of the year. [...]

Continue reading on website
Other news

ParkMobile pays... $1 each for 2021 data breach that hit 22 million

October 5, 2025
ParkMobile has finally wrapped up a class action lawsuit over the platform's 2021 data breach that hit 22 million users. But there's a catch: victims are receiving compensation in the form of a $1 in-app credit, which they must claim manually. And, it comes with an expiration date. [...]

Oracle patches EBS zero-day exploited in Clop data theft attacks

October 6, 2025
Oracle is warning about a critical E-Business Suite zero-day vulnerability tracked as CVE-2025-61882 that allows attackers to perform unauthenticated remote code execution, with the flaw actively exploited in Clop data theft attacks. [...]