⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The article introduces GenieLocker, a new ransomware family used by the Toy Ghouls group. It targets organizations in the Russian manufacturing sector, using custom builds for Windows and Linux.
Russian hackers linked to the group Laundry Bear (also known as TA488) are exploiting a Microsoft Outlook Web Access (OWA) vulnerability, CVE-2026-42897 (CVSS 8.1), to maintain persistent mailbox access even after credential rotation. The attacks, active since July 2026, target U.S. and European government agencies, as well as telecommunications, financial, hospitality, and aerospace sectors.
Russian threat actors tracked as Laundry Bear (Void Blizzard, TA488) exploited CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Outlook Web Access (OWA), to maintain mailbox access even after credential rotation. The campaign, active since July 22, 2026, targets U.S. and European government entities and the telecommunications, financial, hospitality, and aerospace sectors.
Russian threat actors are exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Outlook Web Access, to target U.S. and European government entities as well as telecommunications, financial, hospitality, and aerospace sectors. The activity, attributed to Laundry Bear, involves sending emails from compromised accounts that trigger the exploit and allow persistent mailbox access.
The FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, generally preventing new models from receiving equipment authorization for import, marketing, or sale in the US. Previously authorized models and devices already owned are unaffected. The FCC's Office of Engineering and Technology granted a waiver through January 2029 for software/firmware security updates.
The FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, generally preventing new models from receiving equipment authorization for import, marketing, or sale in the US. Previously authorized models and devices already owned are unaffected. The FCC's Office of Engineering and Technology granted a waiver through January 2029 for software/firmware security updates.