{"vulnerability": "cve-2025-6637", "sightings": [{"uuid": "c5dc533f-d5cf-4a4a-937d-36755193ec25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-6637", "type": "seen", "source": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015", "content": "", "creation_timestamp": "2025-07-29T19:19:14.952005Z"}, {"uuid": "43289d70-7f54-4d3d-aa25-e4a6a0052fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6637", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-704/", "content": "", "creation_timestamp": "2025-07-29T03:00:00.000000Z"}, {"uuid": "e55a51cd-ff01-49ef-956c-65332ab112c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6ocmtdjjv2q", "content": "", "creation_timestamp": "2025-11-28T06:57:46.952532Z"}, {"uuid": "b49eb0ae-7eae-46c9-922f-461c9c58593a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6ocuiuwkn2k", "content": "", "creation_timestamp": "2025-11-28T07:02:06.537452Z"}, {"uuid": "01b99686-b64d-4f0f-ae7e-66af2e903d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6odggvxb62s", "content": "", "creation_timestamp": "2025-11-28T07:12:06.436186Z"}, {"uuid": "306bdd74-b9b8-4a9c-b0b2-f43715fb0f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66373", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3m74l525ixj2w", "content": "", "creation_timestamp": "2025-12-03T23:07:17.187496Z"}, {"uuid": "ed931285-a948-44b5-8a2a-c808fc045b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66373", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m76nxfvi372j", "content": "", "creation_timestamp": "2025-12-04T19:03:08.988028Z"}, {"uuid": "7a9d4ac0-0f0c-4dd6-aa97-f855cd18aef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-66373", "type": "seen", "source": "https://gist.github.com/mala/c578867c0e22fddb2177495ca4c0f535", "content": "", "creation_timestamp": "2025-12-14T13:18:27.000000Z"}, {"uuid": "f59c5b05-db9b-41ee-b9bb-7b6757ccf47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66370", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q4/278", "content": "", "creation_timestamp": "2025-12-16T08:21:16.000000Z"}, {"uuid": "8d96eb4f-72fe-483c-8682-09cd47d30a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mas63b2ujx2u", "content": "", "creation_timestamp": "2025-12-25T06:37:24.582172Z"}, {"uuid": "decb9de1-9ce2-4c3c-a940-6eefbec47b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mas6an2uhh2q", "content": "", "creation_timestamp": "2025-12-25T06:40:24.899422Z"}, {"uuid": "c3e39ebc-8826-47d7-bfa7-d2bc3e0142c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mas6uyke3e2o", "content": "", "creation_timestamp": "2025-12-25T06:51:47.975330Z"}, {"uuid": "518d57be-fc15-4a50-baf8-2858a1f02fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbov4jld2e2e", "content": "", "creation_timestamp": "2026-01-05T16:44:15.930943Z"}, {"uuid": "9fe9c396-1519-473d-ac16-e4618220b123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66374", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2dtytwvs2x", "content": "", "creation_timestamp": "2026-02-04T16:57:36.662134Z"}, {"uuid": "cce60bda-0191-487a-a6e8-1794f46e5e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-66376", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mhfrel4bfy2e", "content": "", "creation_timestamp": "2026-03-19T10:14:23.352061Z"}, {"uuid": "6a39b6fb-fa08-4277-9013-91dfbfb3c602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/01rabbit.bsky.social/post/3mhic742spc2s", "content": "", "creation_timestamp": "2026-03-20T10:20:58.422868Z"}, {"uuid": "9da44902-a7ec-428a-9676-1c1b3901f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/01rabbit.bsky.social/post/3mhica7m5ac2s", "content": "", "creation_timestamp": "2026-03-20T10:21:30.061732Z"}, {"uuid": "14043e67-ae51-47f0-9c60-7caf17e6d6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/01rabbit.bsky.social/post/3mhicjcimdc2s", "content": "", "creation_timestamp": "2026-03-20T10:26:35.395390Z"}, {"uuid": "8e4884ec-70c1-4500-8b0e-c9933fc02bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-66376", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d3a3c78e-2bfc-400c-9c61-58f999e9b108", "content": "", "creation_timestamp": "2026-03-18T18:00:02.360467Z"}, {"uuid": "18fe1f34-c9f3-4770-b002-e96dc77ea430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://www.acn.gov.it/portale/w/zimbra-rilevato-sfruttamento-in-rete-della-cve-2025-66376", "content": "", "creation_timestamp": "2026-03-19T13:07:41.000000Z"}, {"uuid": "ec3df245-ba8a-492d-9351-d51cac3619aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhsni6vt6c2d", "content": "", "creation_timestamp": "2026-03-24T13:09:27.459307Z"}, {"uuid": "52bc4f99-2048-44d3-a647-18fa3e30a77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhsoao5l7k2d", "content": "", "creation_timestamp": "2026-03-24T13:23:10.259988Z"}, {"uuid": "4165a0c4-3966-4fe0-8370-52802c8b4cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhko66fedk2u", "content": "", "creation_timestamp": "2026-03-21T09:00:25.938211Z"}, {"uuid": "bcde4159-025c-4572-ba90-14738c4f3ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhson7aa722d", "content": "", "creation_timestamp": "2026-03-24T13:30:10.333104Z"}, {"uuid": "843af533-d16b-4dce-8601-6024c6386db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6042631", "content": "", "creation_timestamp": "2026-03-18T17:16:21.138614Z"}, {"uuid": "d691b7f4-3ab5-4de2-8f59-7baadc84da49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhv7kkxscs2w", "content": "", "creation_timestamp": "2026-03-25T13:38:17.523839Z"}, {"uuid": "2ddfca13-1666-478f-98eb-9e768f28c03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhim4ezljc23", "content": "", "creation_timestamp": "2026-03-20T13:18:18.825975Z"}, {"uuid": "27f3352b-9260-4a7e-bb59-3195e92253d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhvaluek3k2w", "content": "", "creation_timestamp": "2026-03-25T13:56:53.579661Z"}, {"uuid": "56e4f229-b6bb-476e-8cbd-5c22dea043da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmddj4c2w", "content": "", "creation_timestamp": "2026-03-19T21:02:59.732511Z"}, {"uuid": "9769e63d-f398-450e-b218-1a7dd7af7144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhebotfmxr2m", "content": "", "creation_timestamp": "2026-03-18T20:01:07.723055Z"}, {"uuid": "83d1ad1e-c22d-49e1-9a17-cd06ade5df7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mhitgbpuvc2s", "content": "", "creation_timestamp": "2026-03-20T15:29:07.031034Z"}, {"uuid": "abb1db7d-e96e-4e61-8ebb-63db4f7bfc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhef4m6kgg23", "content": "", "creation_timestamp": "2026-03-18T21:02:31.776063Z"}, {"uuid": "010f4cd4-5cd5-4dab-b0fc-2b8b37e84d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116256421083323787", "content": "", "creation_timestamp": "2026-03-19T14:56:47.287448Z"}, {"uuid": "98ed5d1a-a1a7-4ec1-aed2-aeff8df1f9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhu25cufb626", "content": "", "creation_timestamp": "2026-03-25T02:28:39.887865Z"}, {"uuid": "2bd521df-c634-4138-a2ac-fd5c7ffdc957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhehaenxj32m", "content": "", "creation_timestamp": "2026-03-18T21:40:25.336319Z"}, {"uuid": "e23c0e20-5a76-43f8-94ce-2abf633159ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116256478799968793", "content": "", "creation_timestamp": "2026-03-19T15:11:27.852620Z"}, {"uuid": "ed1e1baf-f9a8-4046-8b45-c4ffda294ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-03-18T12:00:00.000000Z"}, {"uuid": "d8f0b334-89d9-46ed-a0d0-5fafc71eb997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mhggbh57ov2c", "content": "", "creation_timestamp": "2026-03-19T16:28:26.586982Z"}, {"uuid": "f9564187-99b4-447b-b936-256347e1fc07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mhgh3jbncs2f", "content": "", "creation_timestamp": "2026-03-19T16:43:05.033617Z"}, {"uuid": "075e6974-920b-4d89-baa8-0a04a3c02abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhgh4e3utu2k", "content": "", "creation_timestamp": "2026-03-19T16:43:29.821095Z"}, {"uuid": "f23782f4-24b1-49be-9e4d-7306f70e5acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhjbhosl6c2r", "content": "", "creation_timestamp": "2026-03-20T19:40:26.955012Z"}, {"uuid": "db0a55df-0240-4b91-bdcb-79a282478ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-6637", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ab0c3e9d-e4cb-40b4-8979-4fc800783b99", "content": "", "creation_timestamp": "2025-07-29T20:45:45.225099Z"}, {"uuid": "377dfa89-50d4-462b-b70a-0baf61220bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mhhwyqbtes2w", "content": "", "creation_timestamp": "2026-03-20T07:00:27.623715Z"}, {"uuid": "d3ecc999-d52b-4469-8070-862438ec6211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhffyebg7s2u", "content": "", "creation_timestamp": "2026-03-19T06:50:42.530499Z"}, {"uuid": "0aaf6046-ee4f-4a66-a20f-3b653f4370a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://thehackernews.com/2026/03/cisa-warns-of-zimbra-sharepoint-flaw.html", "content": "", "creation_timestamp": "2026-03-19T05:05:00.000000Z"}, {"uuid": "92e6465f-9981-48fd-a3b6-0141913eb394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66377", "type": "seen", "source": "Telegram/EBDNrYfunE7iZKYlJF2B9rwPQB3q-IgiqAlb181ibX97kHc", "content": "", "creation_timestamp": "2026-01-05T20:06:38.000000Z"}, {"uuid": "085d96e2-daf1-4ae6-bd6d-dd9a2be48172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "Telegram/FAHiP5CCenWu92dxIOQ4FEFDti8EunWIiYzRLGxROm4Tk2w", "content": "", "creation_timestamp": "2026-01-05T16:05:40.000000Z"}, {"uuid": "00154e1e-bb8d-4b02-9d73-ad5490e5b5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66379", "type": "published-proof-of-concept", "source": "Telegram/fMtvesIEGvLKzgX_Vr04EQ2rBgwnPRUk0FUIDqd1543CWh4", "content": "", "creation_timestamp": "2026-01-05T19:06:38.000000Z"}, {"uuid": "367b0a85-f21d-4231-81be-3e1acba0b63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "Telegram/E5_cvxocths5g7kSjyWQdR1aWGqyNXfIeWYmanYJQKlDv79E", "content": "", "creation_timestamp": "2026-03-19T15:55:04.000000Z"}, {"uuid": "7eec87cd-2a05-4fad-9f46-ea2886c94ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://t.me/ctinow/247420", "content": "Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376\nhttps://ift.tt/fmkpSiH", "creation_timestamp": "2026-03-19T15:44:33.000000Z"}, {"uuid": "f8b90e78-d21d-41af-b5f8-e8a105b7e9a4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/120356d1-60de-4ccb-8947-b13508f5c5df", "content": "", "creation_timestamp": "2026-06-19T12:45:14.749029Z"}, {"uuid": "256cfbaa-55c9-4b06-b850-b80404ba9d0f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6dbfa806-400b-4204-83e4-3b4efbb6a0b5", "content": "", "creation_timestamp": "2026-06-23T14:03:41.447782Z"}, {"uuid": "3f9ff6bc-9e61-4a3f-97be-13bb03eaa64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-204a", "content": "", "creation_timestamp": "2026-07-23T16:15:02.991499Z"}, {"uuid": "f41a5bb4-62b6-42d1-b5b7-5bcf14dd3c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrdcwvbhgp2v", "content": "Let\u2019s talk reporting with the NSA and the FBI and friends\n\nTA488 used CVE-2025-66376 for 5 months as a zero day, and for a few months after, to target education, gov, and nuclear entities in the U\u2026\n\n\ud83d\udd01 RT @greglesnewich | reposted by @ImposeCost\nhttps://x.com/greglesnewich/status/2080296824716275873", "creation_timestamp": "2026-07-23T17:02:48.669986Z"}, {"uuid": "f6f5b97d-2e0a-4b72-90d4-ae7d2e5e5626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdeocsqyn2y", "content": "CVE-2025-66376: Russian Hackers Target Zimbra Servers for Email Theft #CVE2025 #CyberSecurity #EmailTheft", "creation_timestamp": "2026-07-23T17:33:48.950455Z"}, {"uuid": "0da98219-54c3-4cb9-9d82-d4d2860a4387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdeogmi6c2w", "content": "CVE-2025-66376: Russian Hackers Exploit Zero-Click Flaw in Zimbra Email #CVE202566376 #CyberSecurity #InfoSec", "creation_timestamp": "2026-07-23T17:33:52.331304Z"}, {"uuid": "fdf9475d-2ad4-4ba6-b20e-97d914d8ac65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdeokbemw2p", "content": "CVE-2025-66376: Laundry Bear's Exploitation of Zimbra Underscores Surveillance Risks #Cybersecurity #Vulnerability #Privacy", "creation_timestamp": "2026-07-23T17:33:56.220803Z"}, {"uuid": "ce6b89dd-5f11-4b84-a67e-98e3a6e7b479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdeoublc42j", "content": "CVE-2025-66376: Is Zimbra's Zero-Click Flaw an Unpreventable Threat? #CyberSecurity #ZeroClickVulnerability #Zimbra", "creation_timestamp": "2026-07-23T17:34:06.558210Z"}, {"uuid": "cb0819e9-30f9-4560-9f7c-ac88ae3da60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116970644999399862", "content": "\ud83d\udea8\ud83c\uddf7\ud83c\uddfa Russian state-backed hackers can steal 90 days of Zimbra emails when a victim simply views a message\nA joint international advisory warns that LAUNDRY BEAR is exploiting CVE-2025-66376 against unpatched Zimbra Collaboration Suite servers.\nThe malicious JavaScript executes when an email is viewed in a vulnerable version of Zimbra webmail. No link click, attachment, or additional interaction is required.\nThe group\u2019s Ulej tool attempts to steal:\n\u2022 The victim\u2019s last 90 days of emails\u2022 Email addresses and organization directories\u2022 Saved passwords\u2022 2FA recovery codes\u2022 Newly created application passwords\nThe attackers can also enable IMAP and create an application password named \u201cZimbraWeb\u201d to maintain access to compromised mailboxes.\nThe vulnerability was patched in Zimbra 10.0.18 and 10.1.13. Organizations running older versions should update immediately and investigate for signs of compromise.\nFull details: https://www.ic3.gov/CSA/2026/260723.pdf", "creation_timestamp": "2026-07-23T18:13:19.350655Z"}, {"uuid": "d61a8483-7c98-4a83-8a24-de400f96962c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrdjj4e4jx2a", "content": "Unit 42 linked CL-STA-1114 to Russian actors targeting Zimbra webmail with zero-click phishing, stealing credentials, 2FA codes, session data, and email history via CVE-2025-66376. #Russia #Zimbra #Unit42", "creation_timestamp": "2026-07-23T19:00:22.653369Z"}, {"uuid": "e9036f72-cd0f-477f-b9fb-d83a0e310dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrdkf7tdsa2v", "content": "\ud83d\udd34 EXPLOITED\n\nRussian group Void Blizzard exploited a Zimbra webmail zero-day (CVE-2025-66376) to read months of email.\n\nPatched Nov 2025, unpatched servers still hit.\n\nA reset won't evict it: the payload mints app passwords that skip 2FA.", "creation_timestamp": "2026-07-23T19:16:05.876726Z"}, {"uuid": "7fd4804c-d8ef-45a9-8174-317dcd5d3f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "Telegram/l7q0kOJZNu24ZLKSVeobX3ZBJ4xGeBFHVN2Boi_miXnGDCQ", "content": "", "creation_timestamp": "2026-07-23T20:00:03.902172Z"}, {"uuid": "e36c1d0b-a5c1-4512-9aa3-f5611239cd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdoksbgqw2u", "content": "CVE-2025-66376: Russian Espionage Group Exposed Vulnerabilities in Zimbra #CyberSecurity #Espionage #Zimbra", "creation_timestamp": "2026-07-23T20:30:48.017121Z"}, {"uuid": "97c38150-5fbf-4076-b22a-8c23ec9ee654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdokvladk2y", "content": "CVE-2025-66376: Russian Espionage Group\u2019s Zero-Day Attack on Zimbra Is a Major Risk #CVE2025 #Cybersecurity #Zimbra", "creation_timestamp": "2026-07-23T20:30:51.966504Z"}, {"uuid": "622e3555-8410-4a2c-9aa3-27cd773a698c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdokywgxc2p", "content": "CVE-2025-66376: Russian Exploitation of Zimbra Raises Security Alarms #CVE202566376 #Zimbra #CyberSecurity", "creation_timestamp": "2026-07-23T20:30:54.784834Z"}, {"uuid": "6e96a92e-9e0b-48e8-87fe-2417bea6e108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdol46x2q2y", "content": "Zimbra Exploit CVE-2025-66376: Enduring Risks After the Patch #Zimbra #CVE202566376 #CyberSecurity", "creation_timestamp": "2026-07-23T20:30:58.269066Z"}, {"uuid": "bfacd52c-a12a-46ed-8721-ae64d1fa1b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrdolce2e325", "content": "CVE-2025-66376: Do Zimbra Users Face Unmanageable Risks from Russian Espionage? #Cybersecurity #Zimbra #Espionage", "creation_timestamp": "2026-07-23T20:31:05.243733Z"}, {"uuid": "206aa3e4-f627-496b-a030-f4482056f7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrdtl4764p2u", "content": "Russian state-backed LAUNDRY BEAR is exploiting CVE-2025-66376 in Zimbra Collaboration Suite with phishing to steal email data and account details from Western organizations. #Russia #Zimbra #Phishing", "creation_timestamp": "2026-07-23T22:00:26.436458Z"}, {"uuid": "9f00b6e4-23cf-4edc-8663-e2def97015f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "published-proof-of-concept", "source": "Telegram/l7q0kOJZNu24ZLKSVeobX3ZBJ4xGeBFHVN2Boi_miXnGDCQ", "content": "", "creation_timestamp": "2026-07-24T00:00:07.978151Z"}, {"uuid": "ff60b8cd-6d6f-44b7-9a2a-c7f43b32311f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mre5mnvl3a2q", "content": "\ud83d\udce2 Campagne d'espionnage CL-STA-1114 : exploitation zero-click de Zimbra via CVE-2025-66376\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nRapport publi\u00e9 le 23 juillet 2026 \u2026\nhttps://cyberveille.ch/posts/2026-07-23-campagne-d-espionnage-cl-sta-1114-exploitation-zero-click-de-zimbra-via-cve-2025-66376/ #CVE_2025_66376 #Cyberveille", "creation_timestamp": "2026-07-24T01:00:16.269175Z"}, {"uuid": "daf28ae5-9e4c-4ac1-8271-201449448cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mre6hyn7y42u", "content": "Russian state-backed Laundry Bear is exploiting Zimbra CVE-2025-66376 with malicious HTML emails that auto-run JavaScript, stealing mailboxes and bypassing MFA across government, defense, and other sectors. #Russia #Zimbra #LaundryBear", "creation_timestamp": "2026-07-24T01:15:33.833492Z"}, {"uuid": "e88f0531-4c25-40e1-b65b-6d6f4caee102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/116974233414323289", "content": "Proofpoint uncovered that Russia-aligned threat actor TA488 (Void Blizzard, Laundry Bear) was exploiting a previously unknown vulnerability against Zimbra mailservers for at least five months during 2025, until the issue was patched with CVE-2025-66376. https://www.proofpoint.com/us/blog/threat-insight/ta488-targets-zimbra-mailservers-half-click-exploits", "creation_timestamp": "2026-07-24T09:25:54.609587Z"}, {"uuid": "f0482484-2aae-4472-b198-b3c5f448d144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mrezuxli222z", "content": "Proofpoint uncovered that Russia-aligned threat actor TA488 (Void Blizzard, Laundry Bear) was exploiting a previously unknown vulnerability against Zimbra mailservers for at least five months during 2025, until the issue was patched with CVE-2025-66376. www.proofpoint.com/us/blog/thre...", "creation_timestamp": "2026-07-24T09:26:03.779994Z"}, {"uuid": "f9f8168e-1a82-45d3-bb49-2355949f43ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrf7zyce462y", "content": "CVE-2025-66376: Laundry Bear Is Actively Recruiting Unpatched Zimbra Servers #CyberSecurity #Zimbra #CVE2025", "creation_timestamp": "2026-07-24T11:16:10.620542Z"}, {"uuid": "18d9f569-135e-46d8-b812-449c1233bfed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrfa3erwaa2u", "content": "Because nobody ever bothers updating Zimbra Collaboration servers, CISA, the FBI, and international agencies have issued yet another weary warning about Russian espionage group Laundry Bear exploiting CVE-2025-66376. This delightful XSS flaw casually triggers via embedded JavaScr...\n\nRead full story", "creation_timestamp": "2026-07-24T11:16:56.891171Z"}, {"uuid": "e70986a9-1c72-4871-8a16-2a59dd681a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrfa3uzwgx2y", "content": "Laundry Bear Campaign Exposes Organizations That Ignore CVE-2025-66376 Patching #CyberSecurity #CVE2025 #DataBreach", "creation_timestamp": "2026-07-24T11:17:14.969676Z"}, {"uuid": "2b5806e0-d751-462f-9f5d-9879ae22b42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrfa3ylkru2w", "content": "CVE-2025-66376: Is Laundry Bear Exploiting Weak Patch Management? #CyberSecurity #Vulnerability #CVE2025", "creation_timestamp": "2026-07-24T11:17:18.050320Z"}, {"uuid": "c8017217-05bb-4e62-8b7a-c59478180e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116976207816579600", "content": "\ud83d\udcf0 Russian Hackers Use Zero-Click Zimbra Exploit in Global Spy Campaign\nRussian state actors (Void Blizzard) are exploiting a zero-click Zimbra vulnerability (CVE-2025-66376) to steal credentials and emails. The campaign uses JavaScript injection via phishing emails. Patching is critical. #CyberEspionage #Zimbra #ThreatI...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/russian-webmail-espionage-targets-zimbra/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=daily", "creation_timestamp": "2026-07-24T17:48:01.725449Z"}, {"uuid": "de809b77-3b9e-44e0-a29e-3cc6953db427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116976208002800901", "content": "\ud83d\udcf0 Russian APT 'Laundry Bear' Targets West with Zero-Click Zimbra Exploit\nInternational advisory warns of Russian APT 'Laundry Bear' using a zero-click Zimbra exploit (CVE-2025-66376) in a widespread espionage campaign against Western targets. Actors steal emails &amp; credentials. #ThreatIntel #Zimbra #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/russian-laundry-bear-apt-targets-west-with-zero-click-zimbra-exploit/?utm_source=mastodon&amp;utm\u2026", "creation_timestamp": "2026-07-24T17:48:08.641396Z"}, {"uuid": "1be7d201-6f34-41c3-b8b3-7638ac853e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrfvxwwitc2b", "content": "Russian state actors (Void Blizzard) are exploiting a zero-click Zimbra vulnerability (CVE-2025-66376) to steal credentials and emails. The campaign uses JavaScript injection via phishing emails. Patching is critical. #CyberEspionage #Zimbra #ThreatI...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-24T17:48:44.448763Z"}, {"uuid": "bb67d030-423a-4a54-9f31-7e81bcdf3eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrfvy2pxdt2b", "content": "International advisory warns of Russian APT 'Laundry Bear' using a zero-click Zimbra exploit (CVE-2025-66376) in a widespread espionage campaign against Western targets. Actors steal emails &amp; credentials. #ThreatIntel #Zimbra #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-24T17:48:48.465394Z"}, {"uuid": "bfe2e29d-7219-40eb-885a-71d148fc7453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://t.me/ViralCyber/25485", "content": "\u2b55\ufe0f\u0646\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u0631\u0633\u0627\u0644 \u0644\u06cc\u0646\u06a9 \u0647\u0633\u062a \u0648 \u0646\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 Attachment! \u0641\u0642\u0637 \u06a9\u0627\u0641\u06cc\u0633\u062a \u0627\u06cc\u0645\u06cc\u0644\u062a\u0627\u0646 \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0647\u06a9 \u0634\u0648\u06cc\u062f!\n\u2b05\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0631\u0648\u0647 \u062c\u0627\u0633\u0648\u0633\u06cc \u0631\u0648\u0633\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Zero-Day \u062f\u0631 Zimbra\u061b \u0633\u0631\u0642\u062a \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u060c Password \u0648 \u06a9\u062f\u0647\u0627\u06cc 2FA\n\u2b05\u06cc\u06a9 \u06af\u0631\u0648\u0647 \u062c\u0627\u0633\u0648\u0633\u06cc \u0633\u0627\u06cc\u0628\u0631\u06cc \u0647\u0645\u0633\u0648 \u0628\u0627 \u0631\u0648\u0633\u06cc\u0647 \u06a9\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a \u0622\u0646 \u0628\u0627 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc TA488\u060c Void Blizzard \u0648 Laundry Bear \u0631\u062f\u06cc\u0627\u0628\u06cc \u0634\u062f\u0647\u060c \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u062f\u0631 Zimbra Collaboration Suite\u060c \u0628\u0647 \u0635\u0646\u062f\u0648\u0642\u200c\u0647\u0627\u06cc \u067e\u0633\u062a \u0627\u0644\u06a9\u062a\u0631\u0648\u0646\u06cc\u06a9\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc\u060c \u062f\u0641\u0627\u0639\u06cc\u060c \u0639\u0644\u0645\u06cc \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u06cc \u0646\u0641\u0648\u0630 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\u2b05\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-66376 \u0627\u0632 \u0646\u0648\u0639 Stored Cross-Site Scripting \u06cc\u0627 Stored XSS \u0628\u0648\u062f\u0647 \u0648 \u0628\u062e\u0634 Classic Web Client \u062f\u0631 Zimbra \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0646\u06a9\u062a\u0647 \u0646\u06af\u0631\u0627\u0646\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc Link \u06cc\u0627 \u0628\u0627\u0632\u06a9\u0631\u062f\u0646 Attachment \u0646\u062f\u0627\u0631\u062f\u061b \u0635\u0631\u0641\u0627\u064b \u0628\u0627\u0632\u06a9\u0631\u062f\u0646 \u06cc\u0627 Preview \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0645\u06cc\u0644 \u0645\u062e\u0631\u0628 \u062f\u0631 \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 Zimbra \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc Exploit \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a.\n\u2b05\u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u062f\u0631 HTML Body \u0627\u06cc\u0645\u06cc\u0644 \u062c\u0627\u0633\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u06a9\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u06a9\u0646\u06cc\u06a9 Tag-Splitting \u0648 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u062d\u0648\u0647 \u067e\u0631\u062f\u0627\u0632\u0634 CSS @ import\u060c \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 HTML Sanitization \u062f\u0631 Zimbra \u0631\u0627 \u062f\u0648\u0631 \u0632\u062f\u0647 \u0648 JavaScript \u0645\u062e\u0631\u0628 \u0631\u0627 \u062f\u0631 Session \u0627\u062d\u0631\u0627\u0632\u0647\u0648\u06cc\u062a\u200c\u0634\u062f\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\u2b05\u0628\u062f\u0627\u0641\u0632\u0627\u0631 JavaScript \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0627\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a \u06a9\u0647 Proofpoint \u0622\u0646 \u0631\u0627 ZimReaper \u0646\u0627\u0645\u200c\u06af\u0630\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647\u060c \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a\u060c \u0627\u0632 \u062c\u0645\u0644\u0647:\n\n\ud83d\udd34\u0633\u0631\u0642\u062a Password \u0630\u062e\u06cc\u0631\u0647\u200c\u0634\u062f\u0647 \u062f\u0631 Browser Auto-Fill\n\ud83d\udd34\u0627\u0633\u062a\u062e\u0631\u0627\u062c 2FA Scratch Codes\n\ud83d\udd34\u0633\u0631\u0642\u062a CSRF Token \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session\n\ud83d\udd34\u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0641\u0647\u0631\u0633\u062a \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0632 Global Address List\n\ud83d\udd34\u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc \u06f9\u06f0 \u0631\u0648\u0632 \u06af\u0630\u0634\u062a\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc\n\ud83d\udd34\u0627\u0646\u062a\u0642\u0627\u0644 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u0631\u0642\u062a\u200c\u0634\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 DNS Exfiltration\n\ud83d\udd34\u0627\u06cc\u062c\u0627\u062f App-Specific Password \u0628\u0627 \u0646\u0627\u0645 ZimbraWeb\n\ud83d\udd34\u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 IMAP\u060c POP3 \u0648 SMTP \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 2FA\n\ud83d\udd34\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062d\u0633\u0627\u0628\u200c\u0647\u0627 \u0648 Mail Server\u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u0628\u0639\u062f\u06cc\n\n\u2b05\u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0627\u06cc\u062c\u0627\u062f App-Specific Password\u060c \u062d\u062a\u06cc \u062a\u063a\u06cc\u06cc\u0631 Password \u0627\u0635\u0644\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0646\u06cc\u0632 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u0627\u06cc \u0642\u0637\u0639 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0647\u0627\u062c\u0645 \u06a9\u0627\u0641\u06cc \u0646\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 Credential \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u067e\u0633 \u0627\u0632 Password Reset \u0647\u0645\u0686\u0646\u0627\u0646 \u0641\u0639\u0627\u0644 \u0628\u0627\u0642\u06cc \u0628\u0645\u0627\u0646\u062f \u0648 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u0627\u06cc\u062f\u0627\u0631 \u0628\u0647 Mailbox \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\u2b05\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u060c \u0627\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a \u062d\u062f\u0627\u0642\u0644 \u0627\u0632 \u062c\u0648\u0644\u0627\u06cc \u06f2\u06f0\u06f2\u06f5 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u0627\u0648\u06a9\u0631\u0627\u06cc\u0646\u060c \u0622\u0645\u0631\u06cc\u06a9\u0627\u060c \u06a9\u0634\u0648\u0631\u0647\u0627\u06cc \u0639\u0636\u0648 NATO\u060c \u0627\u0631\u0648\u067e\u0627\u060c \u0622\u0641\u0631\u06cc\u0642\u0627 \u0648 \u0628\u0631\u062e\u06cc \u06a9\u0634\u0648\u0631\u0647\u0627\u06cc \u0645\u0633\u062a\u0642\u0644 \u0645\u0634\u062a\u0631\u06a9\u200c\u0627\u0644\u0645\u0646\u0627\u0641\u0639 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u0627\u0647\u062f\u0627\u0641 \u06af\u0632\u0627\u0631\u0634\u200c\u0634\u062f\u0647 \u0634\u0627\u0645\u0644 \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc\u060c \u0635\u0646\u0627\u06cc\u0639 \u062f\u0641\u0627\u0639\u06cc\u060c \u0645\u0631\u0627\u06a9\u0632 \u0639\u0644\u0645\u06cc\u060c \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0645\u0627\u0644\u06cc\u060c \u062d\u0645\u0644\u200c\u0648\u0646\u0642\u0644 \u0648 \u062d\u062a\u06cc \u062a\u0623\u0633\u06cc\u0633\u0627\u062a \u0647\u0633\u062a\u0647\u200c\u0627\u06cc \u0628\u0648\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631:\n\ud83d\udd34\u0646\u0633\u062e\u0647 Zimbra Collaboration 10.0 \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647 10.0.18\n\ud83d\udd34\u0646\u0633\u062e\u0647 Zimbra Collaboration 10.1 \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647 10.1.13\n\n\u2b05\u0634\u0627\u062e\u0647 Zimbra 10.0 \u0646\u06cc\u0632 \u0627\u0632 \u06f3\u06f1 \u062f\u0633\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f5 \u0628\u0647 End-of-Life \u0631\u0633\u06cc\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0646\u0628\u0627\u06cc\u062f \u0635\u0631\u0641\u0627\u064b \u0628\u0647 \u0646\u0635\u0628 \u0622\u062e\u0631\u06cc\u0646 Patch \u0627\u06cc\u0646 \u0634\u0627\u062e\u0647 \u0627\u06a9\u062a\u0641\u0627 \u06a9\u0646\u0646\u062f \u0648 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0628\u0647 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 \u0627\u0632 Zimbra 10.1 \u0645\u0647\u0627\u062c\u0631\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc41\u200d\ud83d\udde8\u0628\u0627\u0632 \u0647\u0645 \u062a\u0627\u06a9\u06cc\u062f \u0645\u06cc \u0634\u0648\u062f \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc Mail Server \u0627\u0632 \u067e\u0644\u062a\u0641\u0631\u0645 Zimbra \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0646\u062f \u0648 \u0644\u0630\u0627 \u0622\u0646\u0647\u0627 \u0647\u0645 \u0627\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0627\u0631\u0646\u062f.\n\n\u2708\ufe0f@PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-07-25T07:00:03.977249Z"}, {"uuid": "ddbd6c51-488b-448b-8a20-367c2b7a0ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrhorrr4fx2h", "content": "Russia-linked Laundry Bear is using zero-click phishing against Zimbra users in the West, exploiting CVE-2025-66376 in a likely espionage campaign affecting government and commercial targets. #Zimbra #Russia #Ukraine", "creation_timestamp": "2026-07-25T10:45:21.183220Z"}, {"uuid": "2736419e-9283-44e2-8f98-bdae73227865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "exploited", "source": "https://t.me/ViralCyber/25485", "content": "\u2b55\ufe0f\u0646\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u0631\u0633\u0627\u0644 \u0644\u06cc\u0646\u06a9 \u0647\u0633\u062a \u0648 \u0646\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 Attachment! \u0641\u0642\u0637 \u06a9\u0627\u0641\u06cc\u0633\u062a \u0627\u06cc\u0645\u06cc\u0644\u062a\u0627\u0646 \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0647\u06a9 \u0634\u0648\u06cc\u062f!\n\u2b05\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0631\u0648\u0647 \u062c\u0627\u0633\u0648\u0633\u06cc \u0631\u0648\u0633\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Zero-Day \u062f\u0631 Zimbra\u061b \u0633\u0631\u0642\u062a \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u060c Password \u0648 \u06a9\u062f\u0647\u0627\u06cc 2FA\n\u2b05\u06cc\u06a9 \u06af\u0631\u0648\u0647 \u062c\u0627\u0633\u0648\u0633\u06cc \u0633\u0627\u06cc\u0628\u0631\u06cc \u0647\u0645\u0633\u0648 \u0628\u0627 \u0631\u0648\u0633\u06cc\u0647 \u06a9\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a \u0622\u0646 \u0628\u0627 \u0646\u0627\u0645\u200c\u0647\u0627\u06cc TA488\u060c Void Blizzard \u0648 Laundry Bear \u0631\u062f\u06cc\u0627\u0628\u06cc \u0634\u062f\u0647\u060c \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u062f\u0631 Zimbra Collaboration Suite\u060c \u0628\u0647 \u0635\u0646\u062f\u0648\u0642\u200c\u0647\u0627\u06cc \u067e\u0633\u062a \u0627\u0644\u06a9\u062a\u0631\u0648\u0646\u06cc\u06a9\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc\u060c \u062f\u0641\u0627\u0639\u06cc\u060c \u0639\u0644\u0645\u06cc \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u06cc \u0646\u0641\u0648\u0630 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\u2b05\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-66376 \u0627\u0632 \u0646\u0648\u0639 Stored Cross-Site Scripting \u06cc\u0627 Stored XSS \u0628\u0648\u062f\u0647 \u0648 \u0628\u062e\u0634 Classic Web Client \u062f\u0631 Zimbra \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0646\u06a9\u062a\u0647 \u0646\u06af\u0631\u0627\u0646\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc Link \u06cc\u0627 \u0628\u0627\u0632\u06a9\u0631\u062f\u0646 Attachment \u0646\u062f\u0627\u0631\u062f\u061b \u0635\u0631\u0641\u0627\u064b \u0628\u0627\u0632\u06a9\u0631\u062f\u0646 \u06cc\u0627 Preview \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0645\u06cc\u0644 \u0645\u062e\u0631\u0628 \u062f\u0631 \u0646\u0633\u062e\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 Zimbra \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc Exploit \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a.\n\u2b05\u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u062f\u0631 HTML Body \u0627\u06cc\u0645\u06cc\u0644 \u062c\u0627\u0633\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0631\u062f\u0646\u062f. \u0627\u06cc\u0646 \u06a9\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u06a9\u0646\u06cc\u06a9 Tag-Splitting \u0648 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u062d\u0648\u0647 \u067e\u0631\u062f\u0627\u0632\u0634 CSS @ import\u060c \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 HTML Sanitization \u062f\u0631 Zimbra \u0631\u0627 \u062f\u0648\u0631 \u0632\u062f\u0647 \u0648 JavaScript \u0645\u062e\u0631\u0628 \u0631\u0627 \u062f\u0631 Session \u0627\u062d\u0631\u0627\u0632\u0647\u0648\u06cc\u062a\u200c\u0634\u062f\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0631\u062f.\n\u2b05\u0628\u062f\u0627\u0641\u0632\u0627\u0631 JavaScript \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0627\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a \u06a9\u0647 Proofpoint \u0622\u0646 \u0631\u0627 ZimReaper \u0646\u0627\u0645\u200c\u06af\u0630\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647\u060c \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u0627\u06cc \u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a\u060c \u0627\u0632 \u062c\u0645\u0644\u0647:\n\n\ud83d\udd34\u0633\u0631\u0642\u062a Password \u0630\u062e\u06cc\u0631\u0647\u200c\u0634\u062f\u0647 \u062f\u0631 Browser Auto-Fill\n\ud83d\udd34\u0627\u0633\u062a\u062e\u0631\u0627\u062c 2FA Scratch Codes\n\ud83d\udd34\u0633\u0631\u0642\u062a CSRF Token \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a Session\n\ud83d\udd34\u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0641\u0647\u0631\u0633\u062a \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0632 Global Address List\n\ud83d\udd34\u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u06cc\u0645\u06cc\u0644\u200c\u0647\u0627\u06cc \u06f9\u06f0 \u0631\u0648\u0632 \u06af\u0630\u0634\u062a\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc\n\ud83d\udd34\u0627\u0646\u062a\u0642\u0627\u0644 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u0631\u0642\u062a\u200c\u0634\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 DNS Exfiltration\n\ud83d\udd34\u0627\u06cc\u062c\u0627\u062f App-Specific Password \u0628\u0627 \u0646\u0627\u0645 ZimbraWeb\n\ud83d\udd34\u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 IMAP\u060c POP3 \u0648 SMTP \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 2FA\n\ud83d\udd34\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062d\u0633\u0627\u0628\u200c\u0647\u0627 \u0648 Mail Server\u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u0628\u0639\u062f\u06cc\n\n\u2b05\u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0627\u06cc\u062c\u0627\u062f App-Specific Password\u060c \u062d\u062a\u06cc \u062a\u063a\u06cc\u06cc\u0631 Password \u0627\u0635\u0644\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0646\u06cc\u0632 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u0627\u06cc \u0642\u0637\u0639 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0647\u0627\u062c\u0645 \u06a9\u0627\u0641\u06cc \u0646\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 Credential \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u067e\u0633 \u0627\u0632 Password Reset \u0647\u0645\u0686\u0646\u0627\u0646 \u0641\u0639\u0627\u0644 \u0628\u0627\u0642\u06cc \u0628\u0645\u0627\u0646\u062f \u0648 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u0627\u06cc\u062f\u0627\u0631 \u0628\u0647 Mailbox \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0646\u062f.\n\u2b05\u0628\u0631 \u0627\u0633\u0627\u0633 \u06af\u0632\u0627\u0631\u0634\u200c\u0647\u0627\u060c \u0627\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a \u062d\u062f\u0627\u0642\u0644 \u0627\u0632 \u062c\u0648\u0644\u0627\u06cc \u06f2\u06f0\u06f2\u06f5 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u0627\u0648\u06a9\u0631\u0627\u06cc\u0646\u060c \u0622\u0645\u0631\u06cc\u06a9\u0627\u060c \u06a9\u0634\u0648\u0631\u0647\u0627\u06cc \u0639\u0636\u0648 NATO\u060c \u0627\u0631\u0648\u067e\u0627\u060c \u0622\u0641\u0631\u06cc\u0642\u0627 \u0648 \u0628\u0631\u062e\u06cc \u06a9\u0634\u0648\u0631\u0647\u0627\u06cc \u0645\u0633\u062a\u0642\u0644 \u0645\u0634\u062a\u0631\u06a9\u200c\u0627\u0644\u0645\u0646\u0627\u0641\u0639 \u0631\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a. \u0627\u0647\u062f\u0627\u0641 \u06af\u0632\u0627\u0631\u0634\u200c\u0634\u062f\u0647 \u0634\u0627\u0645\u0644 \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc\u060c \u0635\u0646\u0627\u06cc\u0639 \u062f\u0641\u0627\u0639\u06cc\u060c \u0645\u0631\u0627\u06a9\u0632 \u0639\u0644\u0645\u06cc\u060c \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0645\u0627\u0644\u06cc\u060c \u062d\u0645\u0644\u200c\u0648\u0646\u0642\u0644 \u0648 \u062d\u062a\u06cc \u062a\u0623\u0633\u06cc\u0633\u0627\u062a \u0647\u0633\u062a\u0647\u200c\u0627\u06cc \u0628\u0648\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u2b05 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631:\n\ud83d\udd34\u0646\u0633\u062e\u0647 Zimbra Collaboration 10.0 \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647 10.0.18\n\ud83d\udd34\u0646\u0633\u062e\u0647 Zimbra Collaboration 10.1 \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647 10.1.13\n\n\u2b05\u0634\u0627\u062e\u0647 Zimbra 10.0 \u0646\u06cc\u0632 \u0627\u0632 \u06f3\u06f1 \u062f\u0633\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f5 \u0628\u0647 End-of-Life \u0631\u0633\u06cc\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0646\u0628\u0627\u06cc\u062f \u0635\u0631\u0641\u0627\u064b \u0628\u0647 \u0646\u0635\u0628 \u0622\u062e\u0631\u06cc\u0646 Patch \u0627\u06cc\u0646 \u0634\u0627\u062e\u0647 \u0627\u06a9\u062a\u0641\u0627 \u06a9\u0646\u0646\u062f \u0648 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0628\u0647 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc\u200c\u0634\u062f\u0647 \u0627\u0632 Zimbra 10.1 \u0645\u0647\u0627\u062c\u0631\u062a \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc41\u200d\ud83d\udde8\u0628\u0627\u0632 \u0647\u0645 \u062a\u0627\u06a9\u06cc\u062f \u0645\u06cc \u0634\u0648\u062f \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0628\u0648\u0645\u06cc Mail Server \u0627\u0632 \u067e\u0644\u062a\u0641\u0631\u0645 Zimbra \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0646\u062f \u0648 \u0644\u0630\u0627 \u0622\u0646\u0647\u0627 \u0647\u0645 \u0627\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0627\u0631\u0646\u062f.\n\n\u2708\ufe0f@PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-07-26T00:00:46.546994Z"}, {"uuid": "726e40a3-7b7f-44fc-be8e-1e8609178a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrj6skt3kb2d", "content": "Russian APT Turns Zimbra Into a Welcome Mat, Everyone Acts Surprised\nPANIC 78% | Lag 4.47h | CVE-2025-66376 is being used as a Zimbra zero-day by a Russian APT, with local reporting and GrayZon\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-26T01:04:46.747775Z"}, {"uuid": "b39ea9cc-0f1d-4892-91b7-610cdc84034c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66376", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrlvomds4725", "content": "Zero-Day Mail Theft, Because Your Inbox Was Always Too Safe\nPANIC 82% | Lag 0.0h | Zimbra CVE-2025-66376 allows attackers to steal mail and authentication codes from exposed systems. \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-27T02:59:29.844241Z"}, {"uuid": "0ca6198e-2492-4fbe-a2dd-6d5f3db6cbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-66376", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mrp573cyhr2v", "content": "\ud83d\udcf0 Peretas Rusia Eksploitasi Celah Zero-Click Zimbra untuk Mencuri Email\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/28/peretas-rusia-eksploitasi-zimbra-zero-click-curi-email/\n\n#beritaTeknologi #cve-2025-66376 #cybersecurity #email #keamananSiber #laundryBear #phishing #tekno", "creation_timestamp": "2026-07-28T09:51:57.587657Z"}]}