Page 2 - Microsoft Exchange Hack News Today

By   Brad D. Williams on May 03, 2021 at 4:06 PM WASHINGTON: Pulse Connect Secure today released a security patch for its virtual private network (VPN) product that is widely used by federal agencies, critical infrastructure operators, and the defense industrial base. The VPN allows the federal workforce to access enterprise networks from remote locations. Ivanti, the parent company of the VPN developer, said it worked with CISA and other entities to address the zero-day vulnerability origin...

By   Brad D. Williams on May 03, 2021 at 4:38 PM WASHINGTON: Once considered by many to be merely a cyber buzzword, zero-trust security models are all the rage today. Ever since the NSA urged the defense sector to adopt zero trust, it’s been a topic top of mind for security pros, from keynotes to happy hours. Zero trust, as a concept, existed even before the term, which is a decade old now. But with remote workforces and evolving IT environments, threat actors, and cyberattacks, many bel...

By   Brad D. Williams on April 27, 2021 at 4:07 PM WASHINGTON: The powerful chairman of the Senate Intelligence Committee said today a bill that will likely include “mandatory reporting” on cyber incidents and public-private cyber threat intelligence sharing is in the works. Sen. Mark Warner was clear in his speech to the US Chamber of Commerce that there’s a “recognition that our current system is not working.” For example, if the bad guys had wanted the SolarWinds campaign to be ...

Threat actors are targeting one newly discovered and three previously known vulnerabilities in Pulse Connect Secure enterprise VPNs, according to a CISA emergency directive and alert, as well as blog posts by FireEye and Ivanti. "There is no indication the identified backdoors were introduced through a supply chain compromise of the companys network or software deployment process," FireEye noted. By   Brad D. Williams on April 20, 2021 at 9:00 PM

By   Brad D. Williams on April 14, 2021 at 2:02 PM Microsoft Exchange logo WASHINGTON: The FBI carried out a “court-authorized operation” in recent days to remove web shells from hundreds of US computers running Microsoft Exchange server software, the Department of Justice announced as it unsealed a search warrant that permitted the operation. “The FBI is attempting to provide notice of the court-authorized operation to all owners or operators of the computers from which it removed the...

Following CISA's weekend updates on continuing Exchange server hacks, Microsoft is investigating the significant uptick in exploits just days before patches were released.

Gurucul CEO Saryu Nayyar told Breaking Defense, "A threat like this really is one of those rare 'Stop what you are doing and fix this now!' events."

Microsoft Exchange hack, larger than originally believed, prompts emergency task force SHARE A campaign by Chinese hackers that targeted Microsoft Corp.’s Exchange Server, an attack Microsoft warned about earlier this month, is larger than originally believed and has prompted the establishment of an emergency task force. The vulnerabilities are being exploited by a group dubbed Hafnium, which is described as being “highly skilled and sophisticated.” The group app...

The hack – believed to have initially targeted U.S. think tanks – eventually compromised hundreds of thousands of businesses and organizations.

Security professionals are increasingly observing multiple threat actors, from nation-states to cryptominers, exploiting the vulnerabilities. As for China-based HAFNIUM, "This is part of the much larger Chinese effort to constantly be ferreting out new vulnerabilities and then exploiting them -- with no end in sight," said Heritages Dean Cheng. "The Chinese will pay close attention to the Biden administration response." By   Brad D. Williams on March 09, 2021 at 1:34 PM