microsoft safety scanner exchange vulnerability

Response steps recommended by Microsoft include: If the company has not installed the patches and has not applied the mitigations yet, Microsoft recommends installing a Mitigation tool.

Microsoft support continues to help customers by providing mitigation guidance, additional help, and resources. However, cyber attackers continue targeting organisations that have yet to apply the security patches released to mitigate them. The security patches have been released for Microsoft Exchange Server versions 2013, 2016, and 2019, and Exchange Server 2010 has also been updated. Microsoft released updates to patch the security holes in Microsoft Exchange Server.

Cyber attackers utilised administrative access to install a web shell providing a back door and getting continued access to the affected server. The hackers used software vulnerabilities to access on-site Microsoft Exchange Servers and get administrative access to the servers, users’ emails, passwords and personal information, and access to the devices connected to the network, allowing additional malware installation. At the beginning of March 2021, more than 30000 USA organisations and tens of thousands of businesses worldwide have their email servers compromised via flaws in Microsoft Exchange Server software.

Microsoft safety scanner exchange vulnerability