Laundry Bear

U.S. and Allies Attribute Long‑Running Zimbra Email Theft to Russian APT Laundry Bear

The joint advisory warns unpatched Zimbra servers remain vulnerable and that the November 2025 patch does not undo credentials already stolen.