{"uuid": "3ec85299-2bc8-4d02-b132-b2eb7c717e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42897", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117038268776557444", "content": "\ud83d\udcf0 Russian Group Midnight Blizzard Exploits Outlook XSS Flaw (CVE-2026-42897)\nRussian actor Midnight Blizzard (Storm-2945) exploits Outlook XSS flaw CVE-2026-42897 to access mailboxes. Also hijacks hotel Wi-Fi in 'CaptiveCrunch' campaign to steal M365 tokens with CornFlake & ChocoShell malware. #ThreatIntel #APT\n\ud83d\udd17 https://cyber.netsecops.io/articles/russian-hackers-exploit-outlook-flaw-in-widespread-campaign/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-04T16:50:59.330151Z"}