NSA and Partners Issue Advisory on Russian State-Supported Phishing Campaign Targeting Zimbra Collaboration Suite Users

The National Security Agency (NSA), in collaboration with CISA and other international partners, has released a Cybersecurity Advisory detailing an ongoing phishing campaign by Russian state-supported cyber actors (LAUNDRY BEAR) targeting Zimbra Collaboration Suite (ZCS) users. The campaign exploits a zero-day vulnerability (CVE-2025-66376) to exfiltrate email directories and sensitive communications.