Outlook Web Access

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenAug 17, 2026
Last mentioned16h ago

Timeline

2 articles · newest first

Turla’s Cereal toolkit collects mail from compromised Exchange servers

ESET found no external command server; the passive backdoor waits on paths that resemble ordinary Outlook web traffic.

CSO Onlineupdated 14:11 UTC · 6h agofirst 04:55 UTC · 16h agoMalware 12 sources1

Threat Brief: OWASSRF Vulnerability Exploitation

Unit 42 details active exploitation of Exchange SSRF flaws CVE-2022-41080/CVE-2022-41082 via the OWASSRF method, deploying the SilverArrow PowerShell backdoor.

Palo Alto Unit 42Aug 17, 10:58 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2022-41080 CVE-2022-41082 CVE-2022-410404 · 2 reads

Related CVEs

by mentions

CVE-2022-41040100%8.8
Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)
published Oct 3, 2022Microsoft Exchange ServerKEVRansomwarePoC
CVE-2022-4108077%8.8
Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns
published Nov 9, 2022microsoft exchange serverKEVRansomware
CVE-2022-41082100%8.0
Authenticated RCE in Microsoft Exchange Server (ProxyNotShell)
published Oct 3, 2022Microsoft Exchange ServerKEVRansomwarePoC

Appears with

Microsoftvendor · 2
CerealBoxmalware · 1
NATOorganization · 1
ESETorganization · 1
Unit 42organization · 1
Turlathreat actor · 1
ActiveSyncproduct · 1
Cerealmalware · 1
SilverArrowmalware · 1
Exchangeproduct · 1
CrowdStrikeorganization · 1
SilverArrowthreat actor · 1
AnyDeskproduct · 1
Palo Alto Networksorganization · 1
Microsoft Exchange Serverproduct · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned 16h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.