{"id":31807,"date":"2021-03-09T13:37:15","date_gmt":"2021-03-09T18:37:15","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=31807"},"modified":"2021-07-06T16:49:44","modified_gmt":"2021-07-06T20:49:44","slug":"vulnerabilities-in-microsoft-exchange-server","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2021\/03\/09\/vulnerabilities-in-microsoft-exchange-server\/","title":{"rendered":"Vulnerabilities in Microsoft Exchange Server"},"content":{"rendered":"

Brian Krebs<\/a> (via Hacker News<\/a>):<\/p>\n

At least 30,000 organizations across the United States — including a significant number of small businesses, towns, cities and local governments — have over the past few days been hacked by an unusually aggressive Chinese cyber espionage unit that’s focused on stealing email from victim organizations, multiple sources tell KrebsOnSecurity. The espionage group is exploiting four newly-discovered flaws in Microsoft Exchange Server email software, and has seeded hundreds of thousands of victim organizations worldwide with tools that give the attackers total, remote control over affected systems.<\/p><\/blockquote>\n\n

Nick Heer<\/a>:<\/p>\n

Thumbing through that spreadsheet is informative. You will see exploits targeting software and firmware from Apple, Google, Mozilla, and Adobe — especially Adobe. But the number of vulnerabilities in Microsoft’s products that are being used in the wild stands head and shoulders above all other vendors. That is alarming but it is also unsurprising: organizations large and small use Microsoft’s productivity and server products; perhaps more importantly, these products are used by governments<\/em> at all levels with no great alternatives.<\/p><\/blockquote>\n\n

Previously:<\/p>\n