#candc — Public Fediverse posts

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

TA488, a Russia-aligned threat actor, initiated a campaign on July 22, 2026, exploiting CVE-2026-42897, a cross-site scripting vulnerability in Outlook Web Access. The campaign targeted US and European government entities, along with telecommunications, financial, hospitality, and aerospace sectors. The attack employs half-click exploits requiring only email opening to trigger compromise, delivering OWAReaper, a novel JavaScript browser-based implant designed for persistent OWA access. OWAReaper operates stealthily within the browser context, featuring dual C&C channels via GitHub commit messages and inbound emails, plus HTTP and DNS exfiltration protocols. The implant survives browser reboots, credential rotation, and device re-imaging through multiple persistence mechanisms including localStorage manipulation, OAuth token theft, and Exchange folder permission modifications. Infrastructure dating to March 2026 suggests potential zero-day exploitation prior to Microsoft's May patch.

Pulse ID: 6a6a0890823d4ce2caed584a
Pulse Link: https://otx.alienvault.com/pulse/6a6a0890823d4ce2caed584a
Pulse Author: AlienVault
Created: 2026-07-29 14:05:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CandC #CyberSecurity #DNS #Email #Europe #GitHub #Government #HTTP #Hospital #InfoSec #Java #JavaScript #Microsoft #OTX #OpenThreatExchange #Outlook #RAT #Russia #SMS #Telecom #Telecommunication #Vulnerability #ZeroDay #bot #AlienVault

TONIGHT!
Join us for a Pub Night of C and C++ horror stories. Share your funniest and most frustrating experiences from the world of systems programming with others who understand the struggle.
 
Open to all experience levels.
Come for the laughs, stay for the community and conversation.
 
📆 Thursday, May 21, 2026
🕦 7-9 PM
📍Loose Goose Downtown (126 Ouellette Ave, Windsor, ON)
🎟️ RSVP atwww.hackf.org/events

#CandC++  #WindsorTech #WindsorEvents

Uuh, EA open sourced some of it‘s iconic Command & Conquer games.

#EA #CommandAndConquer #CAndC #OpenSource #GitHub #Games #GameDev #IndieGameDev #Gameing

#ArethaFraklin
#Clivilles' & #Cole
#ADeeperLove
#CandC

(B2 A Deeper Feeling Mix)

https://www.youtube.com/watch?v=8gIo_NmCYcU&list=RDQMjFVykNKVffQ&start_radio=1

Finished the #ShadowsOfTheHalflingHall #CastelsAndCrusades #CAndC adventure last night with my group.

I'm still really pleased with the game. Most of the players appreciate the simple resolution mechanic and how fast we can move through things.

I also came to realize that I tend to run most of my #TTRPG sessions much more old school than I initially realize.

I like to give them puzzles with no clear or set resolution and watch them come up with the cleverest solutions then let them make some rolls. They get so excited and it's a lot of work and planning off of my shoulders.

#OSR #GMLife

Nice day out yesterday on inaugural #CandC #BillyBlandChallenge club training #run on #TherfieldHeath, near #Royston. About the best #hills we get around here, which is a bit sad for a #FellRunning group! https://strava.app.link/onTgECAYWub