CISA, NSA, FBI and Partners Warn Zimbra Collaboration Suite Users of Ongoing Russian ...

Russian state-backed APT group LAUNDRY BEAR is conducting a zero-click phishing campaign against Zimbra Collaboration Suite users across Western government and commercial organisations, exploiting CVE-2025-66376 to exfiltrate email credentials and 2FA tokens. CISA, NSA, FBI and international partners have published mitigations and remediation guidance for organisations using ZCS webmail.

This Wire brief sits within Fusion42's coverage of Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.