Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

New details in the OpenAI Hugging Face hack show how far agents will go: 'It's now remarkably easy'

OpenAI's rogue models used publicly exposed credentials across "four accounts on four services" to help facilitate the ...
MIT Technology Review

A fundamental flaw leaves LLMs strikingly vulnerable to attack

It makes it easy to trick them into doing things they shouldn’t, such as telling you how to sabotage an aircraft’s navigation ...
CSO Online

Russian hackers turn Exchange flaw into ‘half-click’ mailbox takeover

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...
Infosecurity Magazine

Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack

A Russia-aligned espionage group has resurfaced after months without observed activity, using a half-click exploit against on ...