Uwaga na krytyczną podatność 0-day w Microsoft Exchange (CVE-2026-42897).

Luka jest aktywnie wykorzystywana i dotyczy OWA (Outlook Web Access). Microsoft opisuje scenariusz ataku: ℹ️ Atakujący wysyła do ofiary odpowiednio spreparowanego mailaℹ️ Ofiara otwiera maila w przeglądarce webowej (tj. w OWA)ℹ️ Po wykonaniu pewnej akcji (np. najechaniu na jakiś element), po cichu wykonuje się kod JavaScript w przeglądarce ofiary [czyli mamy...

#WBiegu #0Day #Exchange #Microsoft #Owa #Websec #XSS

https://sekurak.pl/uwaga-na-krytyczna-podatnosc-0-day-w-microsoft-exchange-cve-2026-42897/

Silly OWA is caching these addresses for me, so I cannot send emails to my group leader or colleagues as it will prefer these over the actual valid ones.

I have already asked it to remove the suggested contacts, so I'm afraid it's part of something else.

When looking with the developer console, I see that the HTTP response payload contains this address, so it's not a local issue.

So frustrating....

#owa #office365

I love how I can make a calendar change in Teams but it somehow won't reflect in Outlook? It's the same damn web application!

#microsoft #owa #howisthisenterprisegrade

Sigh.

Must be the week of IT challenges.

Looks like I might have to run my own email server again, too.

#owa #microslop #email

🇺🇦 #NowPlaying on #BBC6Music's #MaryAnneHobbs

OWA:
🎵 A look that contains the history of man

#OWA

https://owaa.bandcamp.com/track/a-look-that-contains-the-history-of-man

https://open.spotify.com/track/6J5dP1ifLGt3cNvtMQRisM

🇺🇦 #NowPlaying on #BBC6Music's #MaryAnneHobbs

OWA:
🎵 A look that contains the history of man

#OWA

https://owaa.bandcamp.com/track/a-look-that-contains-the-history-of-man

https://open.spotify.com/track/6J5dP1ifLGt3cNvtMQRisM

Pour la première fois, un navire américain a lancé une munition téléopérée de type LUCAS

https://fed.brid.gy/r/https://www.opex360.com/2025/12/19/pour-la-premiere-fois-un-navire-americain-a-lance-une-munition-teleoperee-lucas/