Original release date: March 8, 2021CISA has published a Remediating Microsoft Exchange Vulnerabilities web page that strongly urges all organizations to immediately address the recent Microsoft Exchange Server product vulnerabilities.…
Original release date: March 8, 2021 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info accellion -- fta Accellion FTA 9_12_432 and earlier is affected…
Original release date: March 6, 2021Microsoft has released an updated script that scans Exchange log files for indicators of compromise (IOCs) associated with the vulnerabilities disclosed on March 2, 2021.…
Original release date: March 5, 2021Microsoft has released alternative mitigation techniques for Exchange Server customers who are not able to immediately apply updates that address vulnerabilities disclosed on March 2,…
Original release date: March 4, 2021CISA is aware of threat actors using open source tools to search for vulnerable Microsoft Exchange Servers and advises entities to investigate for signs of…
Original release date: March 4, 2021The National Security Agency (NSA) and CISA have released a Joint Cybersecurity Information (CSI) sheet with guidance on selecting a protective Domain Name System (PDNS)…
Original release date: March 3, 2021CISA has issued Emergency Directive (ED) 21-02 and Alert AA21-062A addressing critical vulnerabilities in Microsoft Exchange products. Successful exploitation of these vulnerabilities allows an attacker…
Original release date: March 3, 2021SummaryCybersecurity and Infrastructure Security (CISA) partners have observed active exploitation of vulnerabilities in Microsoft Exchange Server products. Successful exploitation of these vulnerabilities allows an unauthenticated…
Original release date: March 2, 2021Microsoft has released out-of-band security updates to address vulnerabilities affecting Microsoft Exchange Server 2013, 2016, and 2019. A remote attacker can exploit three remote code…
Original release date: March 1, 2021 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info alleghenycreative -- openrepeater OpenRepeater (ORP) before 2.2 allows unauthenticated command…
