Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations

**Executive Summary:** A joint Five Eyes advisory warns that Russian state‑backed actors (Laundry Bear / Void Blizzard / UAC-0190) have been exploiting a Zimbra Collaboration Suite zero‑day (CVE-2025-66376) with a zero‑click "beehive" exploit to exfiltrate recent emails, maintain persistence, and evade MFA across multiple Western government and commercial sectors; organizations are urged to patch immediately and improve monitoring.