Microsoft Exchange Under Attack With ProxyShell Flaws; Over 1900 Servers Hacked!

ByPR 24
Microsoft Exchange Under Attack With ProxyShell Flaws; Over 1900 Servers Hacked! | IT Security News

This article has been indexed from The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency is warning of active exploitation attempts that leverage the latest line of “ProxyShell” Microsoft Exchange vulnerabilities that were patched earlier this May, including deploying LockFile ransomware on compromised systems.
Tracked as CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207, the vulnerabilities enable adversaries to bypass ACL

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click “Accept” below then you are consenting to this.

Close


Similar Posts

Norwalk’s Datto acquires Israeli cybersecurity firm

Norwalk’s Datto acquires Israeli cybersecurity firm

ByPR 24

Datto Holding Corp. has acquired BitDam Ltd., an Israeli cyberthreat detection company. The financial terms of the acquisition were not disclosed. Weller BitDam’s cyberdefense platform secures collaboration tools, including M365 and Google Workspace, from ransomware, malware and phishing, by proactively defending against cybersecurity breaches within a user’s inbox, chat or cloud drive. “This acquisition marks…

Researchers, cyber security agency urge action by Microsoft cloud database users – Cloud – Security

Researchers, cyber security agency urge action by Microsoft cloud database users – Cloud – Security

ByPR 24

Researchers who discovered a massive flaw in the main databases stored in Microsoft’s Azure cloud platform have now urged all users to change their digital access keys, not just the 3300 it notified this week. Researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital…

Attackers Exploiting F5 Networks BIG-IP Server Vulnerability

Attackers Exploiting F5 Networks BIG-IP Server Vulnerability

ByPR 24

3rd Party Risk Management , Breach Notification , Cybercrime Flaw in Network Traffic Security Management Platform Ranked as Highly Critical Akshaya Asokan (asokan_akshaya) • March 21, 2021     Attackers are exploiting a critical remote code vulnerability in F5 Networks’ BIG-IP platform, tracked as CVE-2021-22986, for which the company released patches on March 10. See…

Telegram emerges as new dark web for cyber criminals

Telegram emerges as new dark web for cyber criminals

ByPR 24

Telegram has exploded as a hub for cybercriminals looking to buy, sell, and share stolen data and hacking tools, new research shows, as the messaging app emerges as an alternative to the dark web. An investigation by cyber intelligence group Cyberint, together with the Financial Times, found a ballooning network of hackers sharing data leaks…

Microsoft warns Azure customers of critical Cosmos DB vulnerability

Microsoft warns Azure customers of critical Cosmos DB vulnerability

ByPR 24

Microsoft has warned thousands of Azure customers that a now-fixed critical vulnerability found in Cosmos DB allowed any user to remotely take over other users’ databases by giving them full admin access without requiring authorization. Azure Cosmos DB is a globally distributed and fully managed NoSQL database service used by high-profile customers, including Mercedes Benz, Symantec,…