The Cybersecurity and Infrastructure Security Agency (CISA) has published reports on DearCry ransomware and China Chopper Web Shell malware linked to recent Exchange Server exploits. Attackers can use this malware to further compromise on-premise Microsoft Exchange servers and launch other attacks.
Microsoft has published new detailed analysis of Exchange Server vulnerabilities, cybercriminal groups and post-compromise second stage attack malware. In addition, the tech giant offered sound mitigation guidance.
Microsoft: New analysis of Exchange Server vulnerabilities and cyberattacks Read More »
Cybersecurity experts are warning exploits against organizations worldwide have grown ten-fold after recent Microsoft Exchange Server zero-day vulnerabilities known as “ProxyLogon” were revealed.
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have issued an urgent joint cybersecurity advisory on the Microsoft Exchange vulnerability exploits, collectively known as “ProxyLogon.”
FBI and CISA issue urgent joint cybersecurity advisory on Exchange server hacks Read More »
Microsoft has released the March 2021 Security updates that includes patches for 89 vulnerabilities, 14 of those rated Critical. The fixes follow just after the tech giant released emergency patched for Exchange flaws being exploited in the wild.
Microsoft March 2021 Security Updates, fixes for 14 Critical bugs Read More »
Microsoft has released emergency out-of-band security updates to fix multiple Critical vulnerabilities impacting Microsoft Exchange Server 2013, 2016 and 2019, collectively known as “ProxyLogon.” The tech giant also published interim mitigations if organizations can not patch immediately, as well as an IOC detection tool.
Microsoft has released the December 2020 Security updates that includes patches for 58 vulnerabilities, 9 of them rated Critical.
Microsoft December 2020 Security Updates Read More »
Chinese Ministry of State Security (MSS)-affiliated cyber threat actors are targeting U.S. government agencies, as well as exploiting four popular vulnerabilities over the past 12 months.
Chinese threat actors targeting U.S. government agencies and these 4 CVEs Read More »
Microsoft issued the February 2019 Security Updates that include nearly 74 unique vulnerability fixes, 20 of them rated critical.
Microsoft February 2019 patch updates Read More »
Microsoft has released a new security advisory for an Elevation of Privilege vulnerability “PrivExchange” that impacts multiple versions of Microsoft Exchange Server.
Microsoft issues new advisory for “PrivExchange” vulnerability Read More »
