Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The feed reports multiple significant cybersecurity events, including alleged Russian state-sponsored exploitation of an Exchange OWA zero-day for persistent mailbox access, active exploitation of Cisco Secure Firewall Management Center static credentials (CVE-2026-20316), attacks against healthcare and water-sector organizations, supply-chain and DNS hijacking incidents, AI-agent credential misuse, and critical publicly exploited vulnerabilities in vBulletin and server BMC interfaces. The most urgent items involve active exploitation, critical infrastructure targeting, and unauthenticated orب