Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Russian state-sponsored hackers are actively exploiting a maximum-severity vulnerability in Microsoft Exchange Server to gain persistent access to email accounts. The attack, dubbed OWAReaper, allows for unauthorized data theft and malware installation simply by opening a malicious email.