VulnerabilityBleeping Computer
6.1 — HIGH
Russian hackers exploit Zimbra zero-click flaw for email theft
CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Russian hackers, attributed to Laundry Bear (Void Blizzard), exploited a zero-day Zimbra vulnerability (CVE-2025-66376) to steal email account data and gain unauthorized access to targeted organizations' email accounts.
⚙️Technical Details
CVEs
CVE-2025-66376
Affected Systems
Synacor Zimbra Collaboration Suite
Attack Vectors
NETWORK
💥Impact Assessment
Severity: high
🛡️Recommended Actions
1Update to the latest version of the software to install all available security updates
2Review the published indicators of compromise
3Implement phishing-resistant multi-factor authentication where possible
📦Affected Products
Synacor Zimbra Collaboration Suite
🔐NVD Verified DataVERIFIED
CVE-2025-66376 ↗CVSS 6.1 — MEDIUM
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NWeaknesses
CWE-79
Affected Products (CPE)
Synacor Zimbra Collaboration Suite
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.