Page 71 - Zero Day News Today

Microsoft has released patches for over 95% of the Exchange Server versions exposed on the Internet.

Four exploits in Microsoft Exchange Server hit the news last week, when we heard that a Chinese hacking group had targeted the email servers of some 30,000...

If I knew then what I know now -- Zero Day Vulnerabilities and why we should confine the unknown When Donald Rumsfeld gave a briefing about the Iraq WMD program in 2002 (Iraqi Weapons of Mass Destruction were a major justification for the second invasion) he said "There are known knowns. There are things we know we know. We also know there are known unknowns. That is to say, we know there are some things we do not know. But there are also unknown unknowns, the ones we dont know we dont know." A...

By Ionut Arghire on March 12, 2021 In addition to state-sponsored threat actors, the recently disclosed vulnerabilities affecting Microsoft Exchange Server are now being targeted by ransomware operators. A total of four critical zero-day vulnerabilities that are collectively referred to as ProxyLogon were patched in Exchange Server at the beginning of this month, and activity surrounding the bugs has only intensified since. This week, ESET revealed that it has identified at least 10 threat act...

Exchange Hafnium Attackers Now Using Ransomware Another reason to patch early and patch often: The Exchange Server zero-day vulnerabilities Microsoft first disclosed earlier this month are now being used in ransomware. As Microsoft disclosed on March 2, the vulnerabilities enable attackers to access e-mail accounts and install leave-behind malware. Microsoft has issued out-of-band patches for the vulnerabilities in Exchange Server 2019 and Exchange Server 2016. The Microsoft Threat Intellig...

By Ionut Arghire on March 11, 2021 At least 10 threat actors are currently involved in the targeting of Microsoft Exchange servers that are affected by recently disclosed zero-day vulnerabilities, according to cybersecurity firm ESET. On March 2, Microsoft announced patches for four bugs (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) that were part of a pre-authentication remote code execution (RCE) attack chain already being exploited in the wild. Successful exploitation...

Two Michigan Senators, one Republican and one Democrat, are teaming up to help out our state’s National Guard Members who’ve been serving at the capitol in Washington D.C. since the January insurrection.

Norways parliament, the Storting, has suffered another cyberattack after threat actors stole data using the recently disclosed Microsoft Exchange vulnerabilities.

Microsoft releases a mega-batch of security updates with patches for a whopping 89 documented vulnerabilities, including one used in zero-day attacks against some in the white-hat hacker community.

Zero Day total site takeover exploit discovered in popular WordPress plugin for Elementor page builder