Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
Russian state-backed hackers from APT28 are actively exploiting a high-severity stored cross-site scripting vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite (ZCS) to target Ukrainian government entities.…
8 articles · Updated March 19, 2026 -
Russian APT Exploits Zimbra XSS to Target Ukrainian Government
A Russian state-linked advanced persistent threat (APT) has targeted a Ukrainian government agency through a cross-site scripting (XSS) vulnerability in the Zimbra Collaboration Suite, identified as CVE-2025-66376. The…
4 articles · Updated March 20, 2026 -
AWS Introduces Bucketsquatting Protection Amid Rising Threats
Amazon Web Services (AWS) has implemented a new security feature to combat S3 Bucket Namesquatting, also known as Bucketsquatting, which allows attackers to exploit predictable naming conventions in AWS bucket names.…
2 articles · Updated March 20, 2026 -
Zimbra urges customers to patch critical web client XSS flaw
18 articles · Updated July 10, 2026
Recent Intelligence Reports
- CVE-2025-66376 — nvd.nist.gov · July 25, 2026
- 826029 — www.cybersecuritydive.com · July 25, 2026
- Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries — Cyberscoop · July 24, 2026
- Russian attackers exploit zero-click vulnerability in Zimbra — Heise.De · July 24, 2026
- Russian APT Laundry Bear perfects zero — Computerweekly · July 24, 2026
- Russian spies exploit unpatched Zimbra flaw to steal NATO member emails — Cybernews · July 24, 2026
- Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets — Darkreading · July 23, 2026
- Year — Theregister · July 23, 2026