{"uuid": "b5e2dbac-c2f9-43e2-a59a-53778473a167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42897", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117032524820989101", "content": "\ud83d\udcf0 Russian Group Midnight Blizzard Exploits Outlook XSS Flaw (CVE-2026-42897)\nRussian actor Midnight Blizzard (Storm-2945) exploits Outlook XSS flaw CVE-2026-42897 to access mailboxes. Also hijacks hotel Wi-Fi in 'CaptiveCrunch' campaign to steal M365 tokens with CornFlake & ChocoShell malware. #ThreatIntel #APT\n\ud83d\udd17 https://cyber.netsecops.io/articles/russian-hackers-exploit-outlook-flaw-in-widespread-campaign/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-03T16:30:12.266463Z"}