Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Russian threat actors are exploiting a vulnerability in Microsoft Outlook Web Access (OWA) to maintain mailbox access after credential rotation, targeting U.S. and European government entities and sectors like telecommunications, financial, hospitality, and aerospace. This follows their prior exploitation of a Zimbra vulnerability.