Microsoft Exchange Server contains a deserialisation of untrusted data that allows an authenticated attacker to achieve remote code execution. Known-exploited catalogue reports exploitation in the wild.
Productmsexchange
Show
Density
…Loading feed…
Loading feed…
No Critical or High events in this view.
Updated
Microsoft Exchange Server contains a deserialisation of untrusted data that allows an authenticated attacker to achieve remote code execution. Known-exploited catalogue reports exploitation in the wild.
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs.
The largest crypto exchange in Brazil has confirmed a cyberattack as millions of dollars left the platform.
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working.
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.
End of feed