Search: “Outlook Web”

52 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 80 Ransomware 54 Exploit / PoC 52 Data breach 24 Threat actor 19 Malware 6 Phishing & fraud 6 Advisory 3 AI industry 1

SeverityAll critical 214 high 30 medium 0 low 0 info 1

RussianTA488 Returns With Persistent Outlook Web Access Attack

Infosecurity MagazineJul 29, 15:10 UTC · Jul 29, 2026Exploit / PoC CVE-2026-42897

60

U.S. CISA adds a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog

Security AffairsMay 16, 17:31 UTC · May 16, 2026Exploit / PoC in the wildCVE-2026-42897

60

At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software

Krebs on SecurityMar 29, 08:27 UTC · Mar 29, 2021Exploit / PoC

60

RedNovember Targets Government, Defense, and Technology Organizations

Recorded FutureNov 14, 00:00 UTC · Nov 14, 2024Exploit / PoC in the wild

60

No, I Did Not Hack Your MS Exchange Server

Krebs on SecurityMar 28, 18:16 UTC · Mar 28, 2021Exploit / PoC in the wild

60

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-1281 CVE-2026-1340

60

Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Exploit / PoC in the wild1

60

Microsoft Exchange ProxyToken flaw can allow attackers to read your emails

Security AffairsAug 31, 10:16 UTC · Aug 31, 2021Exploit / PoC CVE-2021-33766

60

On-Prem Microsoft Exchange Server CVE-2026

The Hacker NewsJun 10, 16:19 UTC · Jun 10, 2026Exploit / PoC in the wildCVE-2026-428971

60

Most organizations have yet to fix CVE-2020

Security AffairsMar 16, 20:00 UTC · Mar 16, 2020Exploit / PoC CVE-2020-0688

60

Chinese hackers forged authentication tokens to breach government emails

Help Net SecurityJul 14, 19:08 UTC · Jul 14, 2023Exploit / PoC in the wild

60

Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Ars Technica · SecurityJul 30, 20:57 UTC · Jul 30, 2026Exploit / PoC in the wildCVE-2026-42897

60

U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

The Hacker NewsSep 9, 04:33 UTC · Sep 9, 2024Exploit / PoC in the wild

60

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

The Hacker NewsAug 29, 15:43 UTC · Aug 29, 2023Exploit / PoC CVE-2023-2868

60

ProxyNotShell

The Hacker NewsOct 4, 10:19 UTC · Oct 4, 2022Exploit / PoC CVE-2022-41040 CVE-2022-41082 CVE-2021-34523+2 CVEs

60

Pawn Storm APT targets MH17 crash investigation

Security AffairsJun 10, 12:06 UTC · Jun 10, 2021Exploit / PoC

60

Pawn Storm used a new Flash Zero-Day in attacks on the NATO & the While House

Security AffairsOct 23, 21:41 UTC · Oct 23, 2017Exploit / PoC in the wild

60

Threat Advisory: Microsoft Outlook privilege escalation vulnerability being exploited in the wild

Cisco TalosMar 15, 23:46 UTC · Mar 15, 2023Exploit / PoC in the wildCVE-2023-23397

60

Comprehensive analysis of initial attack samples exploiting CVE-2023

Kaspersky SecurelistJul 19, 12:00 UTC · Jul 19, 2023Exploit / PoC CVE-2023-23397 CVE-2023-29324

60

A Company Offers $500,000 For Secure Messaging Apps Zero

The Hacker NewsAug 29, 21:31 UTC · Aug 29, 2017Exploit / PoC

60

U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 6, 22:38 UTC · Feb 6, 2025Exploit / PoC in the wildCVE-2025-0411 CVE-2022-23748 CVE-2024-21413+2 CVEs

60

Unpatched Windows Zero-Day Flaw Exploited by 11 State

The Hacker NewsMar 19, 03:46 UTC · Mar 19, 2025Exploit / PoC

60

⚡ Weekly Recap: Instagram Account Hacks, Android Zero

The Hacker NewsJun 9, 05:53 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2025-48595 CVE-2026-28318 CVE-2026-39210+43 CVEs

60

XE Hacker Group Exploits VeraCore Zero

The Hacker NewsFeb 11, 03:52 UTC · Feb 11, 2025Exploit / PoC in the wildCVE-2024-57968 CVE-2025-25181 CVE-2017-9248+6 CVEs1

60

Microsoft plugs 56 vulns, including Office flaw exploited in attacks

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2018Exploit / PoC in the wildCVE-2018-0802 CVE-2017-11882 CVE-2018-0786+3 CVEs

60

Zerodium payouts for Messaging, Email App Exploits are $500,000

Security AffairsAug 25, 07:09 UTC · Aug 25, 2017Exploit / PoC

60

Zimbra zero-day actively exploited by an alleged Chinese threat actor

Security AffairsFeb 4, 09:54 UTC · Feb 4, 2022Exploit / PoC in the wild

60

Microsoft fixes exploited zero-day, revokes certificate used to sign malicious drivers (CVE-2022-44698)

Help Net SecurityDec 13, 00:00 UTC · Dec 13, 2022Exploit / PoC CVE-2022-44698 CVE-2022-41076 CVE-2022-44713+2 CVEs

60

Zerodium looks to buy zero-days in Outlook and Thunderbird email clients

The RecordJan 17, 00:00 UTC · Jan 17, 2023Exploit / PoC

60

⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI

The Hacker NewsJan 20, 09:20 UTC · Jan 20, 2026Exploit / PoC CVE-2025-29824 CVE-2025-2775 CVE-2025-2776+19 CVEs

60

China-linked actor's malware DeepData exploits FortiClient VPN zero-day

Security AffairsNov 19, 15:08 UTC · Nov 19, 2024Exploit / PoC

60

Expert released PoC for Outlook for Android flaw addressed by Microsoft

Security AffairsJun 23, 08:12 UTC · Jun 23, 2019Exploit / PoC CVE-2019-1105

60

Microsoft Fixes Three Zero

Infosecurity MagazineDec 10, 09:45 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62221 CVE-2025-54100 CVE-2025-64671+4 CVEs

60

Clever - and Exploitable - Windows Zero-Day

Schneier on SecurityJun 1, 18:25 UTC · Jun 1, 2022Exploit / PoC

60

CISA adds Microsoft Exchange and Cisco ASA and FTD bugs to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 23, 00:20 UTC · Feb 23, 2024Exploit / PoC in the wildCVE-2020-3259 CVE-2024-21410

60

Threat Source (April 18): New attacks distribute Formbook, LokiBot

Cisco TalosApr 18, 18:00 UTC · Apr 18, 2019Exploit / PoC

60

0patch releases unofficial patches for Windows 0days exploited in the wild

Security AffairsMar 27, 17:52 UTC · Mar 27, 2020Exploit / PoC in the wild

60

'Confidential' Verizon credentials, server logs left publicly exposed

CyberScoopSep 22, 19:35 UTC · Sep 22, 2017Exploit / PoC in the wild

60

Threat Source Newsletter (Jan. 6, 2022)

Cisco TalosJan 6, 19:00 UTC · Jan 6, 2022Exploit / PoC in the wildCVE-2022-0096 CVE-2021-44228

60

Expert released PoC Code Microsoft Edge Remote Code Execution flaw

Security AffairsOct 14, 09:11 UTC · Oct 14, 2018Exploit / PoC CVE-2018-84951

60