Microsoft mitigation for new Exchange Server zero-day exploits can be bypassed
No permanent fix for the Exchange Server vulnerabilities is yet available, but other steps can mitigate the risk.
Stay updated with breaking news from Will Dormann. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
No permanent fix for the Exchange Server vulnerabilities is yet available, but other steps can mitigate the risk.
Late last week, Microsoft confirmed the existence of two actively exploited zero-day vulnerabilities in Exchange Server. Tracked as CVE-2022-41082 and CVE-2022-41040, both security flaws are worrying as they are known to be actively exploited.
Attackers are chaining two vulnerabilities in active attacks to achieve remote code execution on Microsoft Exchange Server
Researchers had discovered that Microsoft's original mitigation steps for the so-called "ProxyNotShell" flaws was easily bypassed.
No permanent fix for the Exchange Server vulnerabilities is yet available, but other steps can mitigate the risk.