Azerbaijan's National Cybersecurity Agency warns Zimbra users of threats

Azerbaijan's National Cybersecurity Agency has warned organizations using Zimbra Collaboration Suite about targeted cyber threats to their email systems.

According to the Agency, cited by Report, a phishing campaign targeting organizations using Zimbra has been ongoing since July 2025.

The attacks exploit the CVE-2025-66376 vulnerability in certain versions of the product.

Exploiting the vulnerability involves sending users a malicious email designed to appear legitimate. Opening such an email on vulnerable systems may lead to malicious code execution, potentially resulting in intercepted correspondence, unauthorized account access, and the use of compromised accounts in further attacks.

The Agency recommends that users identify their Zimbra version, install the latest security updates, monitor suspicious logins and activity, check for unexpected password or configuration changes, and strengthen employee awareness of phishing and social engineering.

In case of suspicious activity, users should restrict account access, terminate active sessions, and investigate the incident.

Zimbra is a platform for corporate email and collaboration widely used by organizations around the world.