MEDIUMVulnerability
Global

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

·Source: The Hacker News

Updated:

Executive Summary

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors. The activity, which began on July 22, 2026, involves the

Analysis

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors. The activity, which began on July 22, 2026, involves the
Source Attribution

Originally published by The Hacker News on Jul 30, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Robinhood wins FCA approval to launch in the UK

Robinhood has received authorisation from the Financial Conduct Authority to begin offering crypto services in the UK.

Finextra
MEDIUMVulnerability

Horizon3 Raises $250 Million to Fund Continuing Growth

Venture financing has become an essential factor in growing new business in today’s fast moving economy. Horizon3’s latest funding explains how and why. The post Horizon3 Raises $250 Million to Fund Continuing Growth appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Say Hello to Agent Insta: Closing the Detection Gap in Exposure Management at Machine Speed

Executive Summary Frontier AI has turned CVE weaponization timelines to hours, making scan-bound detection a growing compliance and breach-risk challenge. Agent Insta powers InstaScan to deliver scanless detection by transforming existing inventory, telemetry, and threat intelligence into validated exposure findings within minutes of disclosure. Operating 24/7, InstaScan enables AI-speed detection

Qualys Blog