Russian hackers exploit Zimbra zero-click flaw for email theft

Multiple active threats and high-impact incidents reported: Russian state-sponsored group Laundry Bear (Void Blizzard) is exploiting a patched Zimbra zero-click vulnerability combined with phishing to steal email; Check Point SmartConsole contains an actively exploited zero-day; RefluXFS (CVE-2026-64600) is a local race-condition XFS flaw allowing root escalation; new msaRAT backdoor tunnels C2 through Chrome/Edge; attackers are abusing Notepad++ installers/plugins (LunchPoke) to deliver persistence and malware; an Adobe Acrobat Chrome extension flaw exposed WhatsApp Web chats; several large‑m