Remove 01
Remove 2023 Remove Cybersecurity Remove Government Remove Military Remove Security
article thumbnail

CISA adds Zimbra bug exploited in attacks against NATO countries to its Known Exploited Vulnerabilities catalog

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) has added a Zimbra flaw, tracked as CVE-2022-27926 , to its Known Exploited Vulnerabilities Catalog. The threat actors created bespoke JavaScript payloads designed for each government targets’ webmail portal. CISA orders federal agencies to fix this flaw by April 24, 2023.

IT 89