Page 24 - Exchange Server News Today

Since Microsoft acknowledged the existence of two actively exploited zero-day vulnerabilities in Exchange Server, security experts were quick to point out that the company was providing bad advice in response.

Value, features, and extensive platform support make IDrive Business a great cloud backup choice

‘SBOM turns on flashing lights on the dashboard; VEX helps you figure out which to turn off’

No permanent fix for the Exchange Server vulnerabilities is yet available, but other steps can mitigate the risk.

Microsoft has updated the mitigation for the latest Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, also referred to ProxyNotShell.

ThreatLocker VP operations explains how stopping illegal conversations between software programs could have prevented exploitation of the major vulnerabilities of the past two years

A mitigation proposed by Microsoft and others for the Exchange server vulnerabilities tracked as ProxyNotShell can be easily bypassed.

Late last week, Microsoft confirmed the existence of two actively exploited zero-day vulnerabilities in Exchange Server. Tracked as CVE-2022-41082 and CVE-2022-41040, both security flaws are worrying as they are known to be actively exploited.

CVE-2022-41040 and CVE-2022-41082 are “strikingly similar” to the ProxyShell vulnerabilities, according to researcher Kevin Beaumont.

Attackers are chaining two vulnerabilities in active attacks to achieve remote code execution on Microsoft Exchange Server