A sophisticated Russian threat group, known as Laundry Bear, has been exploiting a zero-day vulnerability in Zimbra software to target organizations in the US and Ukraine. The attackers use "half-click" phishing emails that can compromise systems simply by being opened or previewed, eliminating the need for victims to click on malicious links. This tactic allows the hackers to gain unauthorized access to sensitive information. The use of zero-day exploits indicates a high level of sophistication and resources, making it a significant concern for organizations that use Zimbra software1. The fact that these exploits are being used against targets in the US and Ukraine suggests a geopolitical motivation behind the attacks. As a result, organizations that use Zimbra software should assess their exposure immediately and take steps to patch any vulnerabilities to prevent potential breaches, as the window for patching is rapidly closing.