InfoSecBulletin Cybersecurity for mankind
CISA has given a new warning about a Microsoft Exchange Server flaw that attackers are already using, which worries organizations that depend on local email systems.
The issue CVE-2026-42897 is a cross-site scripting (XSS) flaw in Microsoft Exchange Server, mainly in Outlook Web Access (OWA).
USA Bimbo Bakeries Confirms Data Stolen in Oracle EBS Zero-Day Attack
ALERT
Roundcube Webmail fixes 12 security flaws, including zero-click XSS and SSRF bypass
New HOOKEDGE Backdoor Deployed by Hackers in European Espionage
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
CrowdStrike launches SafeMind, the first agentic cybersecurity solution for defenders
Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia
India: C-DOT Launches 14 Local Quantum-Safe Technologies
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
Microsoft Reveals Project Zenith Windows PCs Able to Run 30B+ AI Models Locally
Google issues warning of new Chrome zero-day flaw exploited
The official warning says the flaw happens when making a web page. It can occur when certain actions happen, letting attackers run any JavaScript in someone else’s browser.
The flaw was added to CISA’s list of known issues on May 15, 2026, showing that it is being actively used by attackers.
Federal agencies and groups that follow the Binding Operational Directive (BOD) 22-01 must fix the problem by May 29, 2026.
Microsoft Exchange Server Vulnerability Exploit
Security experts say that XSS flaws in business email systems like Exchange are very risky because they can be used to take over logged-in accounts.
An attacker could fool a user into clicking a special link that runs bad scripts in their browser.This can lead to credential theft, mailbox access, or further internal compromise.
Exchange servers have always been a prime target for hackers because they manage important messages and account information.
The flaw is marked as CWE-79, a common type of web security issue that happens when input is not properly cleaned up while making web pages.
CISA wants agencies to apply the security updates and fixes from vendors without delay.
If patches are not ready or cannot be used, agencies should follow other safety steps suggested by Microsoft or think about stopping the use of affected systems until they are safe.
Security teams need to check Exchange server logs for any strange activity. This includes odd login patterns, unexpected script running, or unusual user actions in Outlook Web Access sessions.
New AsyncRAT malware campaign detected in Bangladesh cyber space
