Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Russian actors attack via Outlook Web Access vulnerability

A security vulnerability in OWA allows JavaScript code execution by displaying emails. Russian actors are exploiting this.