#CVE-2024-21410

Germany warns of 17K vulnerable Microsoft Exchange servers exposed online

by

March 26, 2024 at 03:26PM The German national cybersecurity authority warned that 17,000 Microsoft Exchange servers in Germany are exposed and vulnerable to critical security flaws. Approximately 45,000 servers have Outlook Web Access enabled, with 12% using outdated versions. The BSI advised updating to secure versions, installing security updates, and restricting access to web-based services. … Read more

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

by

February 15, 2024 at 12:21AM Microsoft has confirmed active exploitation of a critical security flaw in Exchange Server, allowing attackers to gain privileges and execute operations. It has released patches to address this and other vulnerabilities in its Patch Tuesday updates. Threat actors, including APT28, have a history of exploiting such flaws for NTLM relay … Read more