SecurityThe Hacker Newsabout 2 hours ago
Russian Hackers Exploit Microsoft OWA Flaw
1 min read
Russian threat actor TA488 exploited CVE-2026-42897, an OWA cross-site scripting vulnerability, since May 2026. The attacks deploy OWAReaper, a JavaScript implant that persists in browser localStorage, survives credential rotation, and grants complete mailbox access via Exchange server permissions.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
