Page 64 - Exchange Server News Today

Microsoft Apologizes ‘Deeply’ For Worldwide Azure, Teams Outage ‘We understand how incredibly impactful and unacceptable this is and apologize deeply,’ Microsoft says in a post-incident review report on the outage. By Donna Goodison, Steven Burke March 16, 2021, 12:34 PM EDT Microsoft on Tuesday apologized for a worldwide outage that impacted Azure cloud services including Microsoft Teams, Office 365 and Dynamics 365. “We understand how incredibly imp...

Mar 16, 2021 Since the revelation of four zero-day vulnerabilities currently affecting Microsoft Exchange Server, Check Point Research (CPR) seen hundreds of exploit attempts against organisations worldwide. In a single 24-hour periods, the number exploitation attempts on tracked organisations doubled every two to three hours, with Government/Military being the most targeted (17% of all exploit attempts), followed by Manufacturing (14%), and Banking (11%). To date, hackers have yet to carry out...

By Juha Saarinen on Mar 16, 2021 12:27PM Halts first part of exploit chain. Microsoft has released a PowerShell script to help customers running its Exchange Server on-premises software to quickly and easily mitigate against an attack chain of vulnerabilities that is under heavy exploitation currently. The Exchange On-Premises Mitigation Tool or EOMT is recommended over Microsofts earlier ExchangeMitigations.ps1 script, and handles the CVE-2021-26855 vu...

minute read Share this article: Public proof-of-concept (PoC) exploits for ProxyLogon could be fanning a feeding frenzy of attacks even as patching makes progress. As dangerous attacks accelerate against Microsoft Exchange Servers in the wake of the disclosure around the ProxyLogon group of security bugs, a public proof-of-concept (PoC) whirlwind has started up. It’s all leading to a feeding frenzy of cyber-activity. The good news, however, is that Microsoft has issued a one-clic...

Microsoft has released an interim mitigation tool designed to help smaller organizations take quick action to prevent attacks that exploit the unpatched ProxyLogon

Western Australia's parliamentary email network was hit by suspected Chinese hackers earlier this month as part of a massive global cyber-attack involving Microsoft software.

DearCry ransomware appends ".CRYPT" to forcibly encrypted files. (Source: Sophos) Fresh ransomware targeting as-yet-unpatched on-premises Exchange servers appears to have been rushed to market, with attackers seeking to capitalize on new opportunities before the competition stepped in, security firm Sophos reports. Sophos has published a teardown of the new DearCry ransomware, which it describes as being "unsophisticated" and apparently "created by a beginner." The ransomware was first spotted ...

Microsoft released a one-click mitigation tool for the Hafnium Exchange Server vulnerabilities that the company hopes will help organizations struggling to update. (Microsoft) Microsoft released a one-click mitigation tool for the Hafnium Exchange Server vulnerabilities that the company hopes will help organizations struggling to update. "We realized that there was a need for a simple, easy to use, automated solution that would meet the needs of customers using ...

After the Microsoft Exchange vulnerabilities were reported and the out-of-band release of security patches on 2 March, security researchers started the identification of other adversaries beyond Hafnium exploiting these bugs, one being the DearCry ransomware. DearCry is best described as a new family of ransomware, which was recently discovered may not be very sophisticated. However, […]

The new one-click Microsoft Exchange On-Premises Mitigation Tool is meant to serve as an interim mitigation for those that arent familiar with the patching process or that havent yet applied the Exchange security updates released on March 2, Microsoft explains in a blog post. The company last reported some 82,000 Exchange Servers remain vulnerable to the exploits. This is not a replacement for the Exchange Server security update, Microsoft says, but it is an efficient way to defend against the ...