Russian hackers can steal government emails without victims clicking a link, cyber agencies warn

Russian state-backed hackers (Laundry Bear) have been exploiting a vulnerability in Zimbra Collaboration Suite using a zero-click/“half-click” email technique to steal email contents, account credentials and two-factor authentication tokens from Western government agencies and other organizations; a joint CISA/NSA/FBI advisory reports active exploitation since July 2025 and urges immediate patching, monitoring and remediation.