HAFNIUM targeting Exchange Servers with 0-day exploits – Microsoft Security https://ift.tt/385BnMb Update [03/16/2021]: Microsoft released updated tools and investigation guidance to help IT Pros and incident response teams identify, remediate, defend against associated attacks: Guidance for responders: Investigating and remediating on-premises Exchange Server vulnerabilities. Update [03/15/2021]: Microsoft released a new one-click mitigation tool, the Microsoft […]

Remediation Steps for the Microsoft Exchange Server Vulnerabilities https://ift.tt/2POZ6Kr This post is also available in: 日本語 (Japanese) Background On March 2, the security community became aware of four critical zero-day Microsoft Exchange Server vulnerabilities (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065). These vulnerabilities let adversaries access Exchange Servers and potentially gain long-term access to victims’ environments. While […]

New Old Bugs in the Linux Kernel https://ift.tt/3cqbWGv   Introduction Dusting off a few new (old) vulns Have you ever been casually perusing the source code of the Linux kernel and thought to yourself "Wait a minute, that can’t be right"? That’s the position we found ourselves in when we found three bugs in a […]