Russian APT Deploys Zero‑Click Exploit Against Zimbra Email, CISA Urges Patch
A Russian state‑sponsored group, known as LAUNDRY BEAR, is using a zero‑click exploit (CVE‑2025‑66376) to steal email data from vulnerable Zimbra Collaboration Suite deployments. The joint CISA‑NSA‑FBI advisory details indicators, mitigation steps, and urges organizations to update ZCS immediately to block the campaign.