Follow the latest coverage, related explainers and connected technology stories.
Microsoft Threat Intelligence observed exploitation of CVE-2026-73570 in Internet-facing Zimbra servers, enabling unauthenticated remote command execution when specific components and settings were enabled. The attacks included planting backdoors, escalating privileges, moving between system nodes, and collecting email data and authentication material.