Russian state-supported threat actor LAUNDRY BEAR is exploiting CVE-2025-66376 in Zimbra Collaboration Suite to conduct zero-click webmail exfiltration targeting government and defense entities.
Exploitation Overview: Russian APT LAUNDRY BEAR Targets Zimbra Webmail A joint cybersecurity advisory released by CISA, NSA, FBI, and international intelligence partners details ongoing espionage campaigns by Russian state-supported threat actor LAUNDRY BEAR (also tracked as Void Blizzard, TA488, and CL-STA-1114). Operating since at least July 2025, the group actively targets Zimbra Collaboration Suite (ZCS) … Read more
