⚠️ CRITICAL: Russian hackers exploit Exchange OWA zero-day for long-term mailbox access Russian state-sponsored group Laundry Bear is actively exploiting a zero-day XSS vulnerability (CVE-2026-42897) in Exchange OWA to deploy OWAReaper backdoor. Targets include U.S. and European government entities and private sector organizations. Successful exploitation grants persistent mailbox acc… https://threatnoir.com/focus #infosec #cybersecurity