INCIDENT EVIDENCE GRAPH

Russian hackers exploit Zimbra zero-click flaw for email theft

2026-07-23T16:49:27Z

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability. [...]

• Victim: Organizations using Zimbra Collaboration email servers
• Actor: Laundry Bear (Void Blizzard)
• Exploit: Zimbra zero-click vulnerability
• Method: Phishing combined with exploitation of a patched Zimbra vulnerability

Primary evidence

1. Russian hackers exploit Zimbra zero-click flaw for email theft

中文