Russian hackers exploit Zimbra flaw in Ukrainian govt attacks

APT28 (a Russian state-linked threat actor) is exploiting a high-severity stored XSS in Zimbra Collaboration Suite (CVE-2025-66376) to achieve remote code execution and compromise Zimbra servers and email accounts of Ukrainian government targets; CISA has added the vulnerability to its catalog of exploited-in-the-wild flaws and ordered federal agencies to remediate within two weeks.