HAFNIUM targeting Exchange Servers with 0-day exploits

Resheph

Administrator

Join Date: Jan 2016

Posts: 513
- Share
- Tweet
#1

HAFNIUM targeting Exchange Servers with 0-day exploits

03-02-2021, 09:49 PM

The vulnerabilities recently being exploited were CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065, all of which were addressed in today’s Microsoft Security Response Center (MSRC) release – Multiple Security Updates Released for Exchange Server. We strongly urge customers to update on-premises systems immediately. Exchange Online is not affected.

HAFNIUM targeting Exchange Servers with 0-day exploits - Microsoft Security

https://www.microsoft.com

Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, threat actors used this vulnerability to access on-premises Exchange servers, which enabled access to email accounts, and install additional malware to facilitate long-term access to victim environments. Microsoft Threat Intelligence Center (MSTIC) attributes this campaign with high confidence to HAFNIUM.

Certified Security Geek
Tags: 0-day, exchange server, exploit, hafnium, news

Announcement