🛡️ **URGENT: Russian Espionage Campaign Actively Exploiting Zimbra Zero-Day; Patch Insufficient Without Environment Hardening**
Published Thursday, July 23, 2026 at 03:04 PM PT BLUF: Russian state-sponsored espionage group (assessed as Laundry Bear) has been exploiting a Zimbra Collaboration Suite zero-day vulnerability for at least five months (discovered early 2025, patched November 2025) to harvest email and two-factor authentication codes from Western government and private-sector targets. The group continues active exploitation in unpatched or improperly-updated environments. All organizations running Zimbra must immediately verify patch status and isolation posture—patching alone is insufficient without concurrent access reviews. ...