Saturday, January 28, 2023
  • About us
    • Write for us
    • Disclaimer
    • Terms of use
    • Privacy Policy
  • RSS Feeds
  • Advertise with us
  • Contact us
DefenceTalk
  • Home
  • Defense News
    • Defense & Geopolitics News
    • War Conflicts News
    • Army News
    • Air Force News
    • Navy News
    • Missiles Systems News
    • Nuclear Weapons
    • Defense Technology
    • Cybersecurity News
  • Military Photos
  • Defense Forum
  • Military Videos
  • Military Weapon Systems
    • Weapon Systems
    • Reports
No Result
View All Result
  • Home
  • Defense News
    • Defense & Geopolitics News
    • War Conflicts News
    • Army News
    • Air Force News
    • Navy News
    • Missiles Systems News
    • Nuclear Weapons
    • Defense Technology
    • Cybersecurity News
  • Military Photos
  • Defense Forum
  • Military Videos
  • Military Weapon Systems
    • Weapon Systems
    • Reports
No Result
View All Result
DefenceTalk
No Result
View All Result

Microsoft defends against new threat to Exchange Servers

by Agence France-Presse
April 15, 2021
in Cybersecurity
2 min read
0
US moves closer to retaliation over hacking as cyber woes grow
14
VIEWS

Microsoft on Tuesday moved to defend against a dangerous new threat to Exchange email servers while the fight continued against hackers taking advantage of a flaw patched last month.

The US Cybersecurity and Infrastructure Security Agency, part of the Department of Homeland Security, called on government departments to immediately install the latest software update released by Microsoft.

“These vulnerabilities pose an unacceptable risk to the Federal enterprise and require an immediate and emergency action,” CISA said in a notice.

“This determination is based on the likelihood of the vulnerabilities being weaponized, combined with the widespread use of the affected software across the Executive Branch and high potential for a compromise of integrity and confidentiality of agency information.”

Both CISA and Microsoft said it did not appear that hackers had taken advantage of the newly discovered weakness to break into Exchange email systems.

“Although we are not aware of any active exploits in the wild, our recommendation is to install these updates immediately to protect your environment,” Microsoft said in a post about the patch.

CISA and Microsoft said that the vulnerabilities were different from those fixed last month, when the US tech company disclosed that a state-sponsored hacking group operating out of China was exploiting security flaws in its Exchange email services to steal data from business users.

The company said the hacking group, which it has named “Hafnium,” is a “highly skilled and sophisticated actor.”

Hafnium has in the past targeted US-based companies including infectious disease researchers, law firms, universities, defense contractors, think tanks and NGOs.

The potentially devastating hack is believed to have affected at least 30,000 Microsoft email servers in government and private networks and has prompted calls for a firm response to state-sponsored attacks which could involve “hacking back” or other measures.

Microsoft in March released updates to fix the security flaws, which apply to on-premises versions of the software rather than cloud-based versions, and urged customers to apply them.

US Justice Department officials on Tuesday announced that, with backing from a court, they purged “malicious web shells” hackers had planted in hundreds of computers running Exchange Server software.

Web shells are bits of computer code that allow hackers to reach into computers remotely, and had been planted early this year by taking advantage of a weakness in Exchange, according to a Justice Department release.

“Today’s operation removed one early hacking group’s remaining web shells, which could have been used to maintain and escalate persistent, unauthorized access to US networks,” Justice Department officials said.

Tags: CISAcybersecurityexchangeMicrosoft
Previous Post

F-15EX Eagle II unveiled as newest fighter

Next Post

Iraq: Attacks on Western targets

Related Posts

US DoD Releases Path to Cyber Security Though Zero Trust Architecture

US DoD Releases Path to Cyber Security Though Zero Trust Architecture

November 28, 2022

The Defense Department on Tuesday released its Zero Trust Strategy and Roadmap, which spells out how it plans to move...

US should buy control of Nokia, Ericsson to fight Huawei: attorney general

US bans gear from China’s Huawei and ZTE over security risk

November 28, 2022

US authorities announced a ban Friday on the import or sale of communications equipment deemed "an unacceptable risk to national...

Next Post
Noose Tightening Around ISIL In Mosul, Carter Says

Iraq: Attacks on Western targets

Latest Defense News

China made third-largest air incursion this year, says Taiwan

Senior US general warns of possible looming war with China

January 28, 2023
French Air Force Mirage 2000 jet fighter

France could meet Ukraine’s demand for fighter jets

January 27, 2023
Denmark in talks with Israel to replace howitzers donated to Ukraine

Denmark in talks with Israel to replace howitzers donated to Ukraine

January 27, 2023
Israel, Gaza militants trade missiles after deadly West Bank raid

Israel, Gaza militants trade missiles after deadly West Bank raid

January 27, 2023
Leopard tanks to arrive in Ukraine around late March: Germany

Leopard tanks to arrive in Ukraine around late March: Germany

January 27, 2023
China’s first electromagnetic satellite bears fruitful results

US targets Chinese firm for helping Russian group in Ukraine

January 27, 2023

Defense Forum Discussions

  • The Russian-Ukrainian War Thread
  • Italy defence procurement, arms counter-trade and weapons exports
  • Italian Air Force Update and Topic
  • M1 Abrams gas turbine engine question.
  • Indonesia: 'green water navy'
  • Royal Australian Navy Discussions and Updates 2.0
  • Australian Army Discussions and Updates
  • NZDF General discussion thread
  • Military Aviation News and Discussion
  • Ukrainian - Russian War Memes.
DefenceTalk

© 2003-2020 DefenceTalk.com

Navigate Site

  • Defence Forum
  • Military Photos
  • RSS Feeds
  • About us
  • Advertise with us
  • Contact us

Follow Us

No Result
View All Result
  • Home
  • Defense News
    • Defense & Geopolitics News
    • War Conflicts News
    • Army News
    • Air Force News
    • Navy News
    • Missiles Systems News
    • Nuclear Weapons
    • Defense Technology
    • Cybersecurity News
  • Military Photos
  • Defense Forum
  • Military Videos
  • Military Weapon Systems
    • Weapon Systems
    • Reports

© 2003-2020 DefenceTalk.com