Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days

Reported 23 Jul 2026 by otx · Severity: medium

TA458, a Russia-aligned espionage group likely linked to GRU, continues exploiting half-click cross-site scripting vulnerabilities in webmail platforms to steal sensitive email data. These exploits require no user interaction beyond opening the malicious email in webmail. The act