Briefing critical-infrastructurecommunications
LAUNDRY BEAR: Russia-Linked APT Exploits Zimbra for Zero-Click Email Collection
A joint NCSC and Five Eyes advisory has exposed LAUNDRY BEAR, a Russian state-supported threat actor exploiting a Zimbra Collaboration Suite XSS vulnerability to silently harvest 90 days of email from targeted accounts without any victim interaction.