Related Threat Clusters
-
Microsoft Patches Critical Exchange Server Zero-Day Vulnerability CVE-2026-42897
Microsoft has patched a high-severity zero-day vulnerability in Exchange Server, tracked as CVE-2026-42897, which allows attackers to execute arbitrary JavaScript via crafted emails in Outlook Web Access. The flaw…
27 articles · Updated June 11, 2026 -
TA488 Exploits Outlook Web Access CVE-2026-42897 in New Campaign
TA488 has launched a campaign exploiting CVE-2026-42897, a cross-site scripting flaw in Outlook Web Access (OWA). This vulnerability, disclosed by Microsoft on May 14, 2026, allows attackers to deploy a persistent…
3 articles · Updated July 30, 2026 -
Microsoft June 2026 Patch Tuesday: Record 206 Vulnerabilities Addressed
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
57 articles · Updated June 9, 2026 -
Active Exploitation of CVE-2026-42897 in Microsoft Exchange Server
Microsoft has disclosed a critical vulnerability, CVE-2026-42897, affecting on-premises Exchange Server versions 2016, 2019, and Subscription Edition. This zero-day flaw allows attackers to execute arbitrary JavaScript…
39 articles · Updated May 15, 2026
Recent Intelligence Reports
- Russian hackers turn Exchange flaw into ‘half-click’ mailbox takeover — Csoonline · July 30, 2026
- TA488 May Have Exploited Outlook Web Access 0-Day Flaw Before Microsoft’s Emergency Patch — Cybersecuritynews · July 30, 2026
- Microsoft patches actively exploited Exchange Server XSS vulnerability — Feeds.4Sysops · June 11, 2026
- Microsoft Patch Tuesday June 2026: Record 208 CVEs, Wormable Kernel Flaw Demands Patching — Techtimes · June 10, 2026
- June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’ — Csoonline · June 10, 2026
- Microsoft patches Exchange Server zero — Bleepingcomputer · June 10, 2026
- Microsoft June 2026 Patch Tuesday fixes 5 zero-days, 200 flaws — Bleepingcomputer · June 9, 2026
- Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws — Bleepingcomputer · June 9, 2026