Max-severity Exchange Server OWA zero-day exploited by Kremlin hackers, giving persistent access

Russian hackers are actively exploiting a critical Exchange Server vulnerability that provides persistent access even after credential rotation.

• Max-severity Exchange server flaw under active exploitation by Kremlin hackers
• Russian spies take their half-click email attack from Zimbra to Outlook
• Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
• Russian hackers exploit Exchange OWA zero-day for long-term mailbox access