Remote execution holes in Log4j, Exchange and Confluence lead Five Eyes 2021 exploited CVE list
Written by Chris Duckett, APAC Editor Chris Duckett APAC Editor Chris started his journalistic adventure in 2006 as the Editor of Builder AU after...
Tagged: Exchange
Hive hackers are exploiting Microsoft Exchange Servers in ransomware spree
The Hive threat group is targeting vulnerable Microsoft Exchange Servers to deploy ransomware. First spotted in June 2021, Hive is a Ransomware-as-a-Service (RaaS) model...
Microsoft Adds On-Premises Exchange, SharePoint, Skype to Bug Bounty Program
Microsoft announced this week that on-premises versions of Exchange, SharePoint, and Skype for Business have been added to its Applications and On-Premises Servers Bounty...
Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread Malware
A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IcedID info-stealing malware onto infected machines by...
Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service
Microsoft, over the weekend, rolled out a fix to address an issue that caused email messages to get stuck on its Exchange Server platforms...
Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange Credentials
Malicious actors are deploying a previously undiscovered binary, an Internet Information Services (IIS) webserver module dubbed “Owowa,” on Microsoft Exchange Outlook Web Access servers...
Hackers Steal $200 Million Worth of Cryptocurrency Tokens from BitMart Exchange
Cryptocurrency trading platform BitMart has disclosed a “large-scale security breach” that it blamed on a stolen private key, resulting in the theft of more...
Didi to leave Wall St listing for Hong Kong Stock Exchange
Image: Getty Images Ride hailing app Didi announced it was preparing to leave the New York Stock Exchange in a small note released on...
Application Security / Cloud Security / Cyberwarfare / Data Protection / Email Security / Endpoint Security / Fraud & Identity Theft / Identity & Access / Malware / Network Security / NEWS & INDUSTRY / Phishing / Virus & Malware / Vulnerabilities
PoC Exploit Published for Latest Microsoft Exchange Zero-Day
A security researcher has released proof-of-concept (PoC) exploit code for a recently patched code execution vulnerability affecting on-prem Microsoft Exchange Server installations. Tracked as...
US, UK, and Australia pin Iran for exploiting Fortinet and Exchange holes
Image: Fortinet, ZDNet Cyber authorities across the US, UK, and Australia have called for administrators to immediately patch a quartet of vulnerabilities — CVE-2021-34473,...