CISA orders feds to patch Zimbra XSS flaw exploited in attacks
(bleepingcomputer.com)
1.
2.
Hackers exploited Zimbra flaw as zero-day using iCalendar files
(bleepingcomputer.com)