Page 69 - Exchange Server News Today

10 March 2021, 10:12 pm EST By In the beginning of the month of March, Microsoft revealed that there were vulnerabilities reported in its Exchange Server mail and calendar software. This system is being used by several government entities and personels in different private and public companies. So far, as per initial investigations, the hackers were called as Hafnium, allegedly Chinese hackers.  About 30,000 companies and organizations were affected on the said hacking. However, there were st...

The proof-of-concept tool, which contained exploits for two Exchange Server vulnerabilities, was quickly removed from GitHub.

Experts are still unsure of the hackers' motivations, and whether the incident may have been a "test run" for a larger attack.

ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Wednesday issued a joint advisory warning of active exploitation of vulnerabilities in Microsoft Exchange on-premises products by nation-state actors and cybercriminals. "CISA and FBI assess that adversaries could exploit these vulnerabilities to compromise networks, steal information, encrypt data for ran...

Thursday, March 11, 2021 As we alerted our readers last week, Microsoft announced that its Exchange email servers have been compromised, which is estimated to affect at least 30,000 companies based in the United States. It is reported that the hackers installed web shells (and sometimes multiple web shells) into Microsoft’s customers’ email servers, giving the hackers back doors into the victims’ email content. These web shells allow the attackers to have complete remote control...

The out-of-band Exchange patch released March 2 covers seven unique CVEs, four of which are under active attack. Organizations running on-premises Exchange Servers are advised to address the vulnerabilities as soon as possible, as attackers are continuing to scan for and exploit them. Microsoft today pushed additional patches for older, unsupported versions of Exchange Server. Todays Patch Tuesday release addresses vulnerabilities in Microsoft Windows, Azure and Azure DevOps, Azure Sphere, Inte...

Australian corporations hit by massive Microsoft Server hack Australias cyber security watchdog has urgently warned Aussie corporations using Microsoft Exchange products to urgently patch their software after it was compromised by hackers. Microsoft Exchange Server holds millions of corporate emails, calendars and rostering products and if hacked entire email inboxes could be wiped as well as stolen. The Australian Signals Directorates Australian Cyber Security Centre (ACSC) today confirmed Aus...

Heres what is known so far regarding the recent nation-state attacks on Microsoft Exchange Server zero-day vulnerabilities and the victims of the ongoing attacks.

Microsoft expands top cyber protection for high-risk customers ​ By IANS | Published on ​ Wed, Mar 10 2021 15:21 IST | ​ 0 Views Microsoft. (File Photo: IANS). Image Source: IANS News New Delhi, March 10 : Alarmed at the massive attack by nation-state threat actors including from China on its business email servers, Microsoft has announced the expansion of its enterprise-grade identity and access management protection service AccountGuard to all high-risk members in 31 countries at n...

Bugs in Visual Studio, Visual Studio Code are the least of it Share Copy Patch Tuesday A week after Microsoft warned that four zero-day flaws and three others in its Exchange Server were being actively exploited and issued out-of-band remediation, the cloudy Windows biz has delivered software fixes to address 82 other vulnerabilities as part of its monthly Patch Tuesday ritual. All told, that makes 89 CVEs for the month, 14 of which have been deemed critical. Microsoft says two of these...