https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/

Come get it while it's hot....

"White House press secretary Jen Psaki told reporters today the vulnerabilities found in Microsoft’s widely used Exchange servers were “significant,” and “could have far-reaching impacts.”"

lol

--
Posted on def2

Anonymous wrote:

> https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/

> Come get it while it's hot....

> "White House press secretary Jen Psaki told reporters today the vulnerabilities found in Microsoft’s widely used Exchange servers were “significant,” and “could have far-reaching impacts.”"

I doubt a microsoft product will ever be safe. Not that other systems are free from security holes, but ms seems to be playing catch up for years now and they're nowhere near there.
--
Posted on novaBBS
www.novabbs.com

>>c6c3e461941c65ca58
>I doubt a microsoft product will ever be safe.

I agree, and not because the coders at MS are necessarily bad. It really seems to be a question of attitude more than a question of skill. The link goes to an article where they describe how to assess of an exchange server was attacked or not. You guessed it, it boils down to: check for this and that string and for this and that behavior. As if you could trust any such installation ever again...

https://www.microsoft.com/security/blog/2020/06/24/defending-exchange-servers-under-attack/

--
Posted on def2

>>2d6c87ba4d4e639dd7
and talking about attitude, they are better and faster in depublishing than in fixing their shit:
https://arstechnica.com/gadgets/2021/03/critics-fume-after-github-removes-exploit-code-for-exchange-vulnerabilities/