> TritonInfoSec News
Home / Jul 30, 2026 / Story
0
#1 BleepingComputer general July 29, 2026 at 23:44 UTC

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

By Ionut Ilascu

AI Summary

Russian state-sponsored group Laundry Bear (aka Void Blizzard) is actively exploiting a zero-day vulnerability in Microsoft Exchange Outlook Web Access (OWA) to deploy a backdoor called OWAReaper, enabling persistent long-term mailbox access. This is a significant escalation from the group's previously documented credential-theft campaigns and represents a critical threat to organizations running Exchange with OWA exposed. Security teams should prioritize patching Exchange and auditing OWA-facing infrastructure immediately.

Read full article → https://www.bleepingcomputer.com/news/security/rus…

Relevance score: 88.0/100

# More from July 30

  1. 2
    Cisco warns of FMC static credential flaw exploited in zero-day attacks BleepingComputer
  2. 3
    Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape The Hacker News
  3. 4
    Hackers target over 30 Minnesota water utilities in coordinated OT attack BleepingComputer
  4. 5
    OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach The Hacker News
  5. 6
    Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass The Hacker News
  6. 7
    Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser The Hacker News
  7. 8
    Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory The Hacker News
  8. 9
    Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare BleepingComputer
  9. 10
    A little-known npm package was North Korea’s warm-up act for the axios hack CyberScoop