{"uuid": "1bb9b612-0c9d-47e3-9d87-db9f0a1ba97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27915", "type": "seen", "source": "https://t.me/pphm_HackerNews/1008", "content": "Invisible Schedules: A Covert Campaign Breaching Mail Systems Through Event Triggers\n\nThreat actors have leveraged a zero-day flaw (CVE-2025-27915) in Zimbra Collaboration Suite (ZCS) to deliver malicious JavaScript via iCalendar (.ICS) files. The vulnerability allows execution of arbitrary script in the context of a user\u2019s session when Zimbra processes the calendar attachment.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.028006Z"}