Zimbra Collaboration — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign

  Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…

  82 articles · Updated July 23, 2026
• Russian APT Exploits Zimbra XSS to Target Ukrainian Government

  A Russian state-linked advanced persistent threat (APT) has targeted a Ukrainian government agency through a cross-site scripting (XSS) vulnerability in the Zimbra Collaboration Suite, identified as CVE-2025-66376. The…

  4 articles · Updated March 20, 2026
• Zimbra Collaboration Suite Vulnerability Disclosed

  A security vulnerability has been identified in Zimbra Collaboration Suite, affecting versions prior to 10.0.12, 10.1.4, and 8.8.15 Patch 47. This vulnerability allows remote attackers to exploit cross-site scripting…

  5 articles · Updated April 21, 2026
• CISA Adds Zimbra Vulnerability to KEV Catalog Amid Exploits

  CISA has added a vulnerability in Zimbra Collaboration to its Known Exploited Vulnerabilities (KEV) list, indicating that it is being actively exploited. This addition also includes vulnerabilities in…

  2 articles · Updated January 23, 2026

Recent Intelligence Reports

• Zimbra Security Advisories — wiki.zimbra.com · July 25, 2026
• US and Allies Say Russian Hackers Stole Emails without Social Engineering — Ground.News · July 23, 2026
• Russian APT weaponizes critical Zimbra bug in Ukraine-targeted intrusions — Scworld · March 20, 2026
• Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025 — Securityaffairs.Co · March 19, 2026
• Organizations Warned of Exploited Zimbra Collaboration Vulnerability — Securityweek · January 23, 2026

Related Entities