Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets

Russian hackers exploited a Zimbra zero-day vulnerability, targeting US and Ukraine, using 'half-click' phishing emails that require only previewing the message. This is a significant security concern as it can lead to successful attacks without the victim even clicking on a link. Engineers should be aware of this tactic and ensure their systems are up-to-date with the latest security patches. Users should also be cautious when opening or previewing emails from unknown sources.