3051 matches found
China’s and Russia’s Spying Sprees Will Take Years to Unpack
The full extent of the SolarWinds hack and Hafnium’s attack on Microsoft Exchange Server may never be known...
Zero-day vulnerabilities in Microsoft Exchange Server
What happened? On March 2, 2021 several companies released reports about in-the-wild exploitation of zero-day vulnerabilities inside Microsoft Exchange Server. The following vulnerabilities allow an attacker to compromise a vulnerable Microsoft Exchange Server. As a result, an attacker will gain...
CISA Orders Fed Agencies to Patch Exchange Servers
Hot on the heels of Microsoft’s announcement about active cyber-espionage campaigns that are exploiting four serious security vulnerabilities in Microsoft Exchange Server, the U.S. government is mandating patching for the issues. The news comes as security firms report escalating numbers of relat...
Threat Source newsletter (March 4, 2021)
Newsletter compiled by Jon Munshaw. Of course, we will start things off talking about the Microsoft Exchange Server zero-day vulnerabilities disclosed earlier this week. Microsoft said in a statement that a threat actor is exploiting these vulnerabilities in the wild to steal users’ emails,...
Update to Alert on Mitigating Microsoft Exchange Server Vulnerabilities
CISA is aware of threat actors using open source tools to search for vulnerable Microsoft Exchange Servers and advises entities to investigate for signs of a compromise from at least September 1, 2020. CISA has updated the Alert on the Microsoft Exchange server vulnerabilities with additional...
Security Update for Microsoft Exchange Server 2010 SP 3 (March 2021)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - A remote code execution vulnerability. An attacker could exploit this to execute unauthorized arbitrary code. CVE-2021-26857 %NASLMINLEVEL 70300 C Tenable...
Microsoft Exchange Server Zero-Days (ProxyLogon) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR
Update March 10, 2021: A new section describes how to respond with mitigation controls if patches cannot be applied, as recommended by Microsoft. This section details the Qualys Policy Compliance control ids for each vulnerability. Update March 8, 2021: Qualys has released an additional QID: 5010...
Hackers hit Microsoft Exchange Server to steal email data
By Deeba Ahmed Microsoft says Chinese hackers from the Hafnium group waged "limited and targeted attacks," in which its Exchange Email servers were breached to steal data. This is a post from HackRead.com Read the original post: Hackers hit Microsoft Exchange Server to steal email data...
URGENT — 4 Actively Exploited 0-Day Flaws Found in Microsoft Exchange
Microsoft has released emergency patches to address four previously undisclosed security flaws in Exchange Server that it says are being actively exploited by a new Chinese state-sponsored threat actor with the goal of perpetrating data theft. Describing the attacks as "limited and targeted,"...
URGENT — 4 Actively Exploited 0-Day Flaws Found in Microsoft Exchange
Microsoft has released emergency patches to address four previously undisclosed security flaws in Exchange Server that it says are being actively exploited by a new Chinese state-sponsored threat actor with the goal of perpetrating data theft. Describing the attacks as "limited and targeted,"...
CVE-2021-27065
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-27065
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-26855
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-26857
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-26858
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-27078
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-26858
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2021-26854
Microsoft Exchange Server Remote Code Execution Vulnerability...