Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
2026-07-30T07:23:20Z•f7d23dcb8dc35ec92415e26fa5240d7f47de99d585150f03d56906e41a403eb6
CVE-2026-20316AI securityBMCCisco Secure Firewall Management CenterDNS hijackingHugging Face breachLaundry BearMicrosoft ExchangeOWAReaperOutlook Web AccessRussian state-sponsored threat actorShinyHuntersVoid Blizzardactive exploitationcredential exposurecritical infrastructurehealthcareoperational technologypre-authentication RCEpublic exploitvBulletinwater utilitieszero-day
What happened
A BleepingComputer security feed highlights active exploitation of enterprise vulnerabilities and significant cyber incidents, including Russian state-sponsored exploitation of an Exchange OWA zero-day for persistent mailbox access, active exploitation of Cisco FMC CVE-2026-20316, a critical pre-authenticated vBulletin RCE with public exploit code, attacks against healthcare and water-sector organizations, DNS hijacking, exposed BMC credential-hash leakage, and AI-assisted supply-chain and cloud breaches.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- f7d23dcb8dc35ec92415e26fa5240d7f47de99d585150f03d56906e41a403eb6
- Enrichment time
- 2026-07-30T07:23:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.