Vulnerabilities

Russian Hackers Exploit Exchange OWA Zero-Day to Deploy

July 29, 2026 1 min read 7 views
cybersecurity malware news
The state-sponsored group Laundry Bear (TA488) is using a cross-site scripting zero-day (CVE-2026-42897) in Outlook Web Access to deliver a sophisticated backdoor that grants persistent mailbox access.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.