Search Results: microsoft exchange

FBI Removes ‘Hundreds’ Of Web Shells From Compromised Microsoft Exchange Servers

The FBI has removed web shells from hundreds of vulnerable computers in the country running on-premises versions of Microsoft Exchange Server.

April 14, 2021 Zachary Comeau Leave a Comment

The U.S. Department of Justice says the U.S. Federal Bureau of Investigations has carried out an operation to copy and remove web shells from hundreds of vulnerable computers in the country running on-premises versions of Microsoft Exchange Server. The DOJ announcement comes more than a month after Microsoft and other tech companies disclosed the existence […]

My TechDecisions Podcast Episode 121: Hafnium and the Microsoft Exchange Server Vulnerabilities

MJ Shoer, SVP and executive director of the CompTIA ISAO, joins the podcast to discuss the recently disclosed vulnerabilities in Microsoft Exchange Server.

March 12, 2021 Zachary Comeau Leave a Comment

MJ Shoer, SVP and executive director of the CompTIA ISAO, joins the podcast to discuss the recently disclosed vulnerabilities in Microsoft Exchange Server.

U.S. Officials, Cybersecurity Experts Prepare For Fallout of Microsoft Exchange Server Exploits

March 5, 2021 Zachary Comeau Leave a Comment

The allegedly Chinese hacking group that has been exploiting the vulnerabilities discovered in Microsoft’s Exchange servers could be wide-ranging, U.S. officials say. According to Reuters, the White House is taking an active role in the investigation into the zero-day vulnerabilities discovered in Exchange Server that target on-premise versions and enable access to email accounts and […]

Microsoft Issues Fixes For 108 Vulnerabilities, Including Four In Exchange Server

Microsoft’s monthly Patch Tuesday release for April includes fixes for four vulnerabilities in Exchange Server discovered by the NSA.

April 13, 2021 TD Staff Leave a Comment

Microsoft’s monthly Patch Tuesday release for April includes fixes for a myriad of vulnerabilities, including four in Exchange Server discovered by the U.S. National Security Agency. According to the software giant’s Security Response Center, the updates include over 100 vulnerabilities that fix things ranging from Exchange Server vulnerabilities to flaws in Microsoft Office products, Microsoft […]

Report: Microsoft’s One-Click Exchange Server Mitigation Tool Downloaded 25,000 Times

Microsoft's one-click Exchange Server mitigation tool has helped to reduce the number of vulnerable system by 45% since last week.

March 22, 2021 Zachary Comeau Leave a Comment

A one-click mitigation tool released by Microsoft to help organizations protect themselves from the Exchange Server compromise has been downloaded more than 25,000 times since it was released, the Associated Press reported Monday. Citing a White House National Security Council spokesperson, the AP reported that the number of vulnerable systems has fallen by 45%, thanks […]

Microsoft Releases Automatic Mitigation Feature For Exchange Server Vuln

A new update for Microsoft Defender Antivirus will automatically detect and mitigate the main Exchange Server vulnerability.

March 19, 2021 Zachary Comeau Leave a Comment

Microsoft continues to roll out fixes to the Exchange Server vulnerabilities and help customers protect their environment, this time with a security intelligence update to Microsoft Defender and Antivirus. According to Microsoft, the new update will automatically mitigate CVE-2021-26855, a remote code execution vulnerability that’s part of an attack chain that allows an unauthorized user […]

Microsoft Releases One-Click Tool To Mitigate Exchange Server Vuln

Microsoft is rolling out a quick fix for the on-premises Exchange Server vulnerability for customers that do not have dedicated cybersecurity or IT teams.

March 16, 2021 Zachary Comeau Leave a Comment

Microsoft is rolling out a quick fix for an on-premises Exchange Server vulnerability for customers that do not have dedicated cybersecurity or IT teams. In a security blog, Microsoft said it has released a new one-click mitigation tool to help customers that lack the cybersecurity or IT expertise to apply the security updates that patch […]

Report: Microsoft Investigating Security Partners’ Role in Exchange Server Hack

Microsoft is reportedly looking into whether its security partners played a role in helping hackers carry out attacks exploiting the Exchange Server vulnerabilities.

March 15, 2021 Zachary Comeau Leave a Comment

Microsoft is reportedly looking into whether its security partners played a role in helping hackers carry out attacks exploiting the Exchange Server vulnerabilities, according to the Wall Street Journal. In a March 12 article, the Journal reported that the IT behemoth is questioning how threat actors obtained sensitive information that allowed them to access the […]

Microsoft Releases Additional Updates To Help Customers Protect Against Exchange Server Vulnerabilities

Microsoft has released an additional series of updates to help customers more quickly protect their environments as estimated victim count surges.

March 9, 2021 Zachary Comeau Leave a Comment

Microsoft has released an additional series of updates to help customers more quickly protect their environments in light of the Microsoft Exchange Server vulnerability that has affected thousands of customers. According to Microsoft, the new updates can be applied to some older and supported Cumulative Updates, but are intended only as a temporary measure to […]

Microsoft Says Nation State Hackers Actively Exploiting Exchange Server Zero-Day Vulnerabilities

Microsoft is urging customers to apply security updates to protect against a new vulnerability in Exchange Server that is actively being exploited.

March 3, 2021 Zachary Comeau Leave a Comment

Microsoft is urging customers to apply security updates to protect against a new vulnerability in Exchange Server that the company says is actively being exploited by a China-backed hacking group. Tom Burt, Microsoft’s corporate vice president for customer security and trust, wrote in a Tuesday blog that the group – which the company is calling […]