SecurityThe Recordabout 2 hours ago
International alert spotlights Russia-linked attacks on Zimbra webmail
1 min read
Russian state-aligned hackers exploited a Zimbra Collaboration Suite zero-click vulnerability, CVE-2025-66376, to compromise Western government and commercial organizations since at least July 2025. The flaw, patched in November 2025, allowed payloads to steal 90 days of emails, passwords, and 2FA tokens. The group, tracked as Laundry Bear, targeted NATO, Ukrainian, and US entities.
Level
Hype check
Tap to vote and see what everyone thinks.
