Page 2 - Microsoft Active Protections Program News Today : Breaking News, Live Updates & Top Stories | Vimarsana

The leak led to a sprawling cyber-attack against thousands of Microsoft Exchange email clients globally. Bloomberg | Apr 27, 2021 Kartikay Mehrotra (Bloomberg) -- Microsoft Corp. may revise a program that shares coding flaws in its products with other companies after a suspected leak led to a sprawling cyber-attack against thousands of Microsoft Exchange email clients globally. The technology giant is weighing how and when to share data with at least some of the 81 participants in the Microsoft Active Protections Program, according to six people familiar with it including existing mem...

iTWire Wednesday, 17 March 2021 11:30 Microsoft offers mitigation for Exchange attack, silent on alleged code leak Featured Pixabay Microsoft has offered users of Exchange Server a means of mitigating the so-called ProxyLogon attack, a one-click tool that it says has been tested across the 2013, 2016 and 2019 versions of Exchange Server. But the company said the tool was not totally fool-proof. The company has not said anything about reports emerging last Friday that exploit code for attacking mail servers had been leaked by Microsoft's security partners. The Wall Str...

Following CISA's weekend updates on continuing Exchange server hacks, Microsoft is investigating the significant uptick in exploits just days before patches were released.

DearCry ransomware appends ".CRYPT" to forcibly encrypted files. (Source: Sophos) Fresh ransomware targeting as-yet-unpatched on-premises Exchange servers appears to have been rushed to market, with attackers seeking to capitalize on new opportunities before the competition stepped in, security firm Sophos reports. Sophos has published a teardown of the new DearCry ransomware, which it describes as being "unsophisticated" and apparently "created by a beginner." The ransomware was first spotted in the wild on March 9. DearCry targets a critical proxy-logon flaw in Microsoft Exchange email serv...

WASHINGTON — The sophisticated hacks pulled off by Russia and China against a broad array of government and industrial targets in the United States — and the failure of the intelligence agencies to detect them — are driving the Biden administration and Congress to rethink how the nation should protect itself from growing cyberthreats.