CISA Updates Advisory on Threat Actors Exploiting CVEs Against Zimbra

CISA and the Multi-State Information Sharing & Analysis Center (MS-ISAC) has updated joint Cybersecurity Advisory AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite, originally released August 16, 2022. The advisory has been updated to include additional Malware Analysis Reports and indicators of compromise.

CISA encourages organizations to review the latest update to AA22-228A and apply the recommended mitigations.