Frequency
4
occurrences
First Seen
March 18, 2026
Last Seen
July 24, 2026
Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
Russian state-backed hackers from APT28 are actively exploiting a high-severity stored cross-site scripting vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite (ZCS) to target Ukrainian government entities.…
8 articles · Updated March 19, 2026 -
Russian Hackers Target Zimbra Users, Compromise Hundreds of Emails
A coordinated cyber espionage campaign by the Russian hacker group Laundry Bear has led to the theft of hundreds of emails from Zimbra users. The campaign, which initially focused on Ukraine, has since expanded to…
4 articles · Updated July 24, 2026
Recent Intelligence Reports
- Russian Hackers Stole Hundreds of Zimbra Users' Emails — www.novinky.cz · July 24, 2026
- US and allies say Russian hackers stole emails without social engineering — Itnews.Au · July 23, 2026
- Updated CISA exploited flaws list adds SharePoint, Zimbra bugs | brief — Scworld · March 19, 2026
- CISA orders feds to patch Zimbra XSS flaw exploited in attacks — Bleepingcomputer · March 18, 2026