Microsoft Release Multiple Security Updates for Exchange Server after Zero-day Exploitation
Equate TechnologiesEquate Technologies Pty Ltd
Equate TechnologiesEquate TechnologiesMar/04/2021
Microsoft has released an alert urging organisations to apply the recently released patch for Microsoft Exchange Server as soon as possible, detecting multiple Zero-day exploits being actively targeted in the wild. The observed attacks have been attributed to a Chinese state-sponsored threat actor, targeting Exchange vulnerabilities to gain access to multiple victim networks and exfiltrate data.
The exploited vulnerabilities are CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065 which have all been addressed in Microsoft’s patch release early this week.
We recommend applying these security updates to all vulnerable systems as soon as possible, prioritising those that are internet-facing. If the patches can not be applied immediately, consider taking additional steps to prevent successful exploitation.
The Equate Managed Security Team responded instantly to this Microsoft alert using a five-stage approach:
Click here for IOCs taken from the observed attacks in the wild
Microsoft’s advice on the security updates can be found here.
03.30.2021
Equate wins Partner of the Year and achieves Advanced Partner Status with Fortinet.
03.03.2021
A journey through ethical hacking, imposter syndrome, climate change and cyber predictions for 2021
02.25.2021
With a strong background in Cyber Protection services in the Australian Defence Force for the last ten years, Painter has spent the last four years in the Defence Security Operations Centre (DSOC)