2 years, 6 months ago

Microsoft Exchange Server Has a Zero-Day Problem

There were global ripples in tech policy this week as VPN providers were forced to pull out of India as the country’s new data collection law takes hold, and UN countries prepare to elect a new head of the International Telecommunications Union—a key internet standards body. In a blog post, Microsoft described the first flaw as a server-side request forgery vulnerability, and the second as “an attack that allows remote code execution on a vulnerable server when PowerShell is accessible to the attacker.” The post also provides guidance for how on-premises Microsoft Exchange customers should mitigate the attack. James Olson, a former chief of CIA counterintelligence, told Reuters, “If we’re careless, if we’re reckless, and we’ve been penetrated, then shame on us.” On Wednesday, a former National Security Agency staffer was charged with three violations of the Espionage Act for allegedly attempting to sell classified national defense information to an unnamed foreign government, according to court documents unsealed this week. On Tuesday, hackers hijacked Fast Company’s content management system, blasting two obscene push notifications to the publication’s Apple News followers.

Wired
Microsoft Iran Reuters Cia Fast Company Exchange Server Vulnerable Server
CERT-In identifies multiple vulnerabilities in Microsoft products and Red Hat Linux Kernel
2 years, 8 months ago

CERT-In identifies multiple vulnerabilities in Microsoft products and Red Hat Linux Kernel

The Hindu
Microsoft
Number of exploit attempts increased 6x after Microsoft's revelation of four zero-day vulnerabilities: Report
4 years ago

Number of exploit attempts increased 6x after Microsoft's revelation of four zero-day vulnerabilities: Report

Firstpost
Cpr
Microsoft Exchange server attacked by Hafnium, company says
4 years, 1 month ago

Microsoft Exchange server attacked by Hafnium, company says

CNN
China

Discover Related