Security News Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes TheHackerNews Daniel Bender 23 Jul 2026 Share Russian spies exploited CVE-2025-66376 in Zimbra to steal 90 days of mail, passwords, 2FA codes, and directories from Western targets.