Wer seine #Exchange - Patches nicht installiert hat möchte das nachholen... Oder besser die Software wechseln :/
---
RT @HonkHase
A New Attack Surface on MS Exchange Part 1 - ProxyLogon!
#Hafnium ick hör dir tapsen 😑
https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html?m=1
https://twitter.com/HonkHase/status/1423892715515822081
RT @cyb3rops@twitter.com
I've created and published several rules based on @Volexity@twitter.com's and Microsofts blog posts on #HAFNIUM
The YARA rules (incl. the ones from Volexity) are now available in LOKI and THOR Lite
YARA
https://github.com/Neo23x0/signature-base/blob/master/yara/apt_hafnium.yar
Sigma
https://github.com/SigmaHQ/sigma/blob/master/rules/web/web_exchange_exploitation_hafnium.yml
RT @certbund
Microsoft releases emergency security patches for Exchange Server 📧 2013 | 2016 | 2019 and 2010 (for Defense in Depth purposes) due to active exploitation by #HAFNIUM group #PATCHNOW 🔥🩹
Blog: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/
Patches via MSRC: https://msrc-blog.microsoft.com/2021/03/02/multiple-security-updates-released-for-exchange-server/