Russian hackers can steal emails without a click

Proofpoint RSS aggregation highlights active and emerging threats, including Russian state-sponsored email espionage, exploitation of Exchange and Zimbra zero-day vulnerabilities, theft of email and 2FA codes without user interaction, Microsoft Entra credential validation through OAuth client ID spoofing, ransomware, and AI-enhanced attacks. The most urgent themes involve active exploitation of enterprise email infrastructure and targeted espionage against nuclear, defense, and government-related organizations.