The UK NCSC has issued an alert regarding Russian state-backed 'zero-click' email attacks exploiting vulnerabilities in Zimbra Collaboration Suite (ZCS). The attacks, attributed to the 'Laundry Bear' group, compromise users simply by viewing a malicious email to steal correspondence. The NCSC urges immediate patching of affected ZCS versions and enhanced network monitoring, as these techniques could be adapted to other email platforms.
Threat Management , Phishing , Threat Intelligence UK issues alert over Russian zero-click email attacks July 24, 2026 Share By SC Staff (Adobe Stock) The UK's National Cyber Security Centre (NCSC) issued an alert regarding a new 'zero-click' threat campaign orchestrated by Russian state-backed hackers targeting organizations across critical sectors, according to a recent report by IT Pro. The 'beehive' attacks, attributed to the 'Laundry Bear' threat group, exploit vulnerable versions of Zimbra Collaboration Suite (ZCS) software to steal email correspondence. These zero-click attacks compromise users simply by viewing a malicious email, bypassing traditional security measures. Targeted sectors include defense, education, energy, technology, law enforcement, and government agencies. Notably, the techniques were extensively trialled on Ukrainian organizations before being deployed against Western nations. The NCSC urges ZCS users to apply immediate patches and enhance network monitoring. Analysis suggests these methods could be adapted for other email software, posing a broader risk. Experts emphasize the need for rapid software patching and layered technical defenses, as zero-click exploits offer attackers a silent, invisible entry point, circumventing human security training and making them a significant challenge for defenders. Source: IT Pro SC Staff Related Malware Golden Chickens malware-as-a-service resurfaces with four new families SC Staff July 24, 2026 The Hacker News disclosed that the threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings. Malware AI assistant used in cyberattack on Thailand’s Ministry of Finance SC Staff July 24, 2026 An open-source AI assistant named Hermes was used in a cyberattack targeting Thailand's Ministry of Finance, compromising sensitive personnel data and internal systems. Threat Management US to deny visas to foreign nationals involved in cybercrime SC Staff July 24, 2026 The United States will deny visas to foreign nationals involved in cybercrime, with potential extensions to their immediate families, according to a recent report by The Register. Related Events Cybercast Better Threat Intelligence Between Public and Private Sectors On-Demand Event Cybercast RSAC Preview: Exposure management takes center stage On-Demand Event Virtual Conference Nationwide Cybersecurity Summit 2025: Safeguarding America’s Digital Future On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Account Harvesting Backdoor Deauthentication Attack Dictionary Attack Distributed Scans Domain Hijacking DumpSec Dumpster Diving Password Cracking Reconnaissance You can skip this ad in 5 seconds