Russian Espionage Group Exploited Zimbra Security Flaw for Email and 2FA Theft23. July 2026CybersecurityA zero-day vulnerability in Zimbra enabled Russian attackers to exfiltrate 90 days of email history, directories, stored passwords, and 2FA recovery codes by simply opening a message. Share on: