Azerbaijan warns Zimbra users of targeted cyber threats

Azerbaijan’s National Cybersecurity Agency has warned organisations using Zimbra Collaboration Suite of targeted cyber threats to their email systems.

The agency said a phishing campaign exploiting the CVE-2025-66376 vulnerability had been underway since July 2025, Caliber.Az reports.

Users receive malicious emails that could, if opened, result in correspondence being intercepted and unauthorised access to accounts, the agency said.

It advised users to install the latest security updates, monitor suspicious logins and activity, check for unexpected changes to passwords and configurations, and raise employee awareness of phishing and social engineering.

If suspicious activity is detected, users should restrict access to affected accounts, terminate active sessions and investigate the incident, the agency said.

Zimbra is a corporate email and collaboration platform used by organisations worldwide.

By Aghakazim Guliyev