Exchange Servers Under Active Attack via ProxyShell Bugs

Microsoft’s Digital Crimes Unit (DCU) has seized 17 malicious domains used by scammers in a business email compromise (BEC) campaign targeting the company’s customers. The domains taken down by Microsoft were so-called “homoglyph” domains registered to resemble those of legitimate business. This technique allowed the threat actors to impersonate companies when communicating with their clients. According to the complaint filed…

Fraud Management & Cybercrime , Fraud Risk Management , Next-Generation Technologies & Secure Development Microsoft Warns of Clever Social Engineering Using ‘BazaCall’ Malware Jeremy Kirk (jeremy_kirk) • August 3, 2021     Ransomware actors have set up a call center to trick victims into running a malicious macro in an Excel document, giving them control…

Beijing has furiously accused NATO of ‘exaggerating “China threat theory” and artificially creating confrontations’ after the Western alliance vowed to take on the country for the first time on Monday. NATO leaders said they would work together to counter the ‘systemic challenges’ posed by Beijing’s policies, as US President Joe Biden renewed Washington’s transatlantic ties at his…

CISA, the US Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, has told federal agencies that they have until 12:00pm EDT on Monday April 5 to scan their networks for evidence of intrusion by malicious actors, and report back the results. CISA is ordering agencies with on-premises Microsoft Exchange servers to urgently conduct the…

Globally, 90 per cent of enterprises among those surveyed are yet to achieve their digital-first goals with 49 per cent admitting that cyber security is the top-most priority for their business, a report showed on Monday. While 45 per cent of enterprises lost productivity during the crisis due to problems of connectivity, 41 per cent…

Microsoft says customers may experience printing and scanning issues on devices using smart card (PIV) authentication after installing July 2021 Windows 10 security updates on a domain controller (DC). “After installing updates released July 13, 2021 on domain controllers (DCs) in your environment, printers, scanners, and multifunction devices that are not compliant with section 3.2.1 of RFC 4556…