Critical Exim bug bypasses security filters on 1.5 million mail servers

July 12, 2024 at 04:55PM Censys warns of over 1.5 million unpatched Exim mail transfer agent (MTA) instances vulnerable to CVE-2024-39929, allowing threat actors to bypass security measures and deliver malicious attachments. While mostly concentrated in the US, Russia, and Canada, these servers are at risk, with a PoC available but no active exploitation reported … Read more

Microsoft Says Russian Gov Hackers Stole Email Data from Senior Execs

January 19, 2024 at 07:54PM Russian government-backed hackers infiltrated Microsoft’s network, accessing senior executives’ emails and attachments in cybersecurity and legal departments. Microsoft’s security team detected the attack in January 2024, tracing it back to November 2023. The intrusion did not exploit vulnerabilities in Microsoft’s products or access customer environments. The company will notify customers … Read more