{"uuid": "d55777a9-ebed-435e-b7eb-f627dd02983c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1008", "content": "Invisible Schedules: A Covert Campaign Breaching Mail Systems Through Event Triggers\n\nThreat actors have leveraged a zero-day flaw (CVE-2025-27915) in Zimbra Collaboration Suite (ZCS) to deliver malicious JavaScript via iCalendar (.ICS) files. The vulnerability allows execution of arbitrary script in the context of a user\u2019s session when Zimbra processes the calendar attachment.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.076666Z"}