Skip to content
Threat Feed
Subscribe

Tag

Zero-Click

2 briefs RSS
critical threat

Russian State-Backed 'LAUNDRY BEAR' Exploits Zimbra Zero-Click Vulnerability

The Russian state-supported threat group LAUNDRY BEAR is exploiting a zero-click vulnerability, dubbed 'beehive,' in the Zimbra Collaboration Suite (ZCS) webmail service, actively stealing sensitive emails and gaining persistent access to compromised networks since July 2025 by merely viewing a malicious email, with Western organizations across various sectors being targeted.

Zimbra Collaboration Suite LAUNDRY BEAR phishing zero-click espionage state-sponsored zimbra email-theft
3t
critical advisory

Pixel 10 Zero-Click Exploit Chain via Dolby and VPU Driver Vulnerabilities

A zero-click exploit chain was developed for the Google Pixel 10, achieving root access on Android by exploiting a patched Dolby vulnerability (CVE-2025-54957) and a memory mapping vulnerability in the Chips&Media Wave677DV video processing unit (VPU) driver.

Pixel 10 +2 android zero-click privilege-escalation kernel-exploit
3r 1t 1c