Cyber espionage campaign targeted stock exchange executive’s Outlook account

Multiple high-impact incidents and disclosures: a prolonged espionage intrusion into a senior stock-exchange executive’s Outlook mailbox (150 days) with silent email exfiltration; claims of mobile-device compromise of officials by Russia’s FSB (no technical evidence provided); CISA additions to its Known Exploited Vulnerabilities catalog (including Android/Linux kernel, Windows Shell and ConnectWise issues); an actively exploited Android privilege-escalation vulnerability fixed in Google’s June 2026 update (CVE-2025-48595); a critical unauthenticated stack overflow in HP Poly VoIP phones that可