Russian LAUNDRY BEAR Hackers Exploit Zimbra Zero-Day to Steal 90 Days of Emails

Russian state-supported threat actors tracked as LAUNDRY BEAR have exploited a former zero-day flaw in Zimbra Collaboration Suite ZCS webmail to steal up to 90 days of email communications, credentials, and corporate directory data from targeted organizations. The activity, detailed in a joint cybersecurity advisory released on July 23, 2026, has targeted Western government and commercial entities since at least July 2025. The campaign affected organizations in the defense…

Diamond Model