Stay updated with breaking news from Exchange Server. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
ThreatLocker VP operations explains how stopping illegal conversations between software programs could have prevented exploitation of the major vulnerabilities of the past two years
A mitigation proposed by Microsoft and others for the Exchange server vulnerabilities tracked as ProxyNotShell can be easily bypassed.
Late last week, Microsoft confirmed the existence of two actively exploited zero-day vulnerabilities in Exchange Server. Tracked as CVE-2022-41082 and CVE-2022-41040, both security flaws are worrying as they are known to be actively exploited.
CVE-2022-41040 and CVE-2022-41082 are “strikingly similar” to the ProxyShell vulnerabilities, according to researcher Kevin Beaumont.
Attackers are chaining two vulnerabilities in active attacks to achieve remote code execution on Microsoft Exchange Server