{"uuid": "384c84d0-677f-4009-80cf-1a7aa5fe03cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42897", "type": "seen", "source": "https://bsky.app/profile/threatinsight.proofpoint.com/post/3mrsrlbnqck2b", "content": "\ud83d\udea8 We are following up with additional observations of the TA488\u2019s use of \u201chalf-click\u201d exploits.\n\nThe group has initiated a new wave of exploitation abusing a cross-site scripting (XSS) vulnerability, CVE-2026-42897, in Outlook Web Access (OWA).\n\nNew blog: www.proofpoint.com/us/blog/thre...", "creation_timestamp": "2026-07-29T20:34:41.912043Z"}