UCSF IT Technology

Cybercriminals have launched phishing attacks that hijack legitimate email threads to deliver malicious URLs. Attackers hijack email threads to further increase the believability of the attacks.

Zimbra released security updates to address a vulnerability in Zimbra Enterprise Email Solution that is being actively exploited. An unauthenticated attacker could exploit this vulnerability to steal cleartext credentials from a targeted Zimbra instance without any user interaction. For a complete description of the vulnerabilities and affected systems Zimbra Product Releases. IT Security

Threat Alert: BEC Lures Imitate US Fire Administration

Threat Alert: Dual-Purpose Phish Use Blocked Email Lure

Threat Alert: USDA-Themed Lures Harvest Email Credentials