The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

In the worst-case scenario, attackers can execute malicious code and completely compromise n8n servers. Even though there are ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential ...

The NCSC and partners warned of a novel phishing technique being deployed against high-profile users of Zimbra's ...

CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...

OWAReaper abuses CVE-2026-42897 to steal OAuth tokens, alter mailbox permissions, and persist inside Exchange accounts.

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...

Opening a booby-trapped message unleashes a browser implant that can survive password changes and device rebuilds ...

A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...