OWAReaper abuses CVE-2026-42897 to steal OAuth tokens, alter mailbox permissions, and persist inside Exchange accounts.
The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...
OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...
Amazon Threat Intelligence has tied a DPRK hacking group to four separate NPM package supply chain attacks, including axios. The company’s security teams have connected the axios, debug, chalk, and ...