SITREP - Independent OSINT Channel

🔍 Exchange OWA zero-day used for persistent mailbox compromise Proofpoint says the Russian-linked group Laundry Bear/Void Blizzard exploited CVE-2026-42897, an XSS flaw in Outlook Web Access, to deliver the OWAReaper backdoor via crafted emails opened in the reading pane. The…

🤖 Autonomous AI agents enter the offensive cyber stack Resecurity’s analysis outlines how tools including T3MP3ST, Strix, CyberStrike, XBOW, PentAGI, PentestGPT, and Nebula can automate attack-surface mapping, vulnerability discovery, exploit validation, and reporting with…

🤖 Autonomous AI agents enter the offensive cyber stack Resecurity’s analysis outlines how tools including T3MP3ST, Strix, CyberStrike, XBOW, PentAGI, PentestGPT, and Nebula can automate attack-surface mapping, vulnerability discovery, exploit validation, and reporting with…

📡 Teams vishing chain tied to Chaos ransomware Sophos says threat cluster STAC4749 targeted dozens of North American organizations from February to June 2026 by posing as IT support in Microsoft Teams chats and calls. Victims were pushed to launch Quick Assist or RemSupp,…

📡 Air Force widens vendor pool for CCA Increment 2 The U.S. Air Force says up to six vendors could move into early prototyping for CCA Increment 2 after roughly 10 more months of concept refinement with nine unnamed companies. The program will then proceed to prototype and…

🔍 Exchange OWA zero-day used for persistent mailbox compromise Proofpoint says the Russian-linked group Laundry Bear/Void Blizzard exploited CVE-2026-42897, an XSS flaw in Outlook Web Access, to deliver the OWAReaper backdoor via crafted emails opened in the reading pane. The…