Case Study: Hackers Exploit Zimbra Flaw as Zero-Day Using iCalendar Files
📊Incident Overview
A zero-day vulnerability in Zimbra Collaboration Suite (ZCS) has been exploited by hackers using malicious iCalendar files. The flaw, identified as CVE-2025-27915, allows attackers to execute arbitrary JavaScript and steal sensitive data from Zimbra Webmail.
📚Lessons Learned
Lesson 1
Lesson 2
Lesson 2