Page 67 - Exchange Server News Today

A ransomware strain dubbed DearCry has been spotted encrypting the email data on unpatched Exchange servers, and then demanding victims pay up.

Orgs advised to take steps to avoid compromise by increasing range of threat actors

A ransomware variant is now also leveraging the critical vulnerabilities.

DearCry ransomware targets vulnerable Exchange servers As predicted, ransomware gangs have started to target vulnerable instances of Microsoft Exchange Server, making patching an even greater priority Share this item with your network: By Published: 12 Mar 2021 13:57 Microsoft has confirmed that a new strain of ransomware is targeting vulnerable on-premise Microsoft Exchange Servers through the dangerous ProxyLogon vulnerabilities as cyber criminal groups zero in on those who have yet to, ...

UK security officials have told companies here to install the latest Microsoft Exchange Server updates after hackers exploited flaws in the software to gain remote access to computers

By Ionut Arghire on March 12, 2021 In addition to state-sponsored threat actors, the recently disclosed vulnerabilities affecting Microsoft Exchange Server are now being targeted by ransomware operators. A total of four critical zero-day vulnerabilities that are collectively referred to as ProxyLogon were patched in Exchange Server at the beginning of this month, and activity surrounding the bugs has only intensified since. This week, ESET revealed that it has identified at least 10 threat act...

Report: Microsoft looking into whether leaked data was used in Exchange hacks - SiliconANGLE

Microsoft is reportedly looking closely at its Microsoft Active Protections Program (MAPP) to figure out if an anti-malware partner in China leaked proof-of-concept code ahead of the availability of Exchange Server patches.

More on Exchange Server vulnerabilities, criminal groups blocked from using secure messaging service and warning about sex toys.

Exchange Hafnium Attackers Now Using Ransomware Another reason to patch early and patch often: The Exchange Server zero-day vulnerabilities Microsoft first disclosed earlier this month are now being used in ransomware. As Microsoft disclosed on March 2, the vulnerabilities enable attackers to access e-mail accounts and install leave-behind malware. Microsoft has issued out-of-band patches for the vulnerabilities in Exchange Server 2019 and Exchange Server 2016. The Microsoft Threat Intellig...