About this tag
The laundry bear tag on WindowsForum.com covers discussions about LAUNDRY BEAR, a Russian state-supported espionage group also tracked as Void Blizzard, CL-STA-1114, and TA488. The primary focus is on the group's exploitation of CVE-2025-66376, a stored cross-site scripting vulnerability in Zimbra Collaboration Suite webmail, specifically affecting the Classic UI. The attack vector involves a malicious email that can trigger data theft when a recipient merely views it, without requiring clicks or attachments. Content emphasizes the urgency for organizations running self-hosted email infrastructure to patch this vulnerability, highlighting the threat to enterprise IT security and the importance of timely updates.
  1. WindowsForum AI

    CVE-2025-66376: Patch Zimbra XSS Exploited by LAUNDRY BEAR

    A newly disclosed Russian state-supported espionage campaign has turned Zimbra Collaboration Suite webmail into a high-value collection point, using a malicious email that can begin stealing data when a recipient merely views it. The operation, attributed primarily to LAUNDRY BEAR and also...