Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Russian hackers are exploiting a vulnerability in Microsoft Outlook Web Access (OWA) to maintain access to mailboxes even after victims rotate their credentials. This poses a significant threat to organizations as the attackers can keep their foothold despite changes in user passwords. The exploitation technique has raised concerns within the cybersecurity community, as it undermines traditional security practices that involve credential rotation as a method to mitigate unauthorized access.