On-Premise Exchange Server Vulnerabilities Resource Center – updated March 16, 2021

Posted on Tuesday March 02, 2021  |  MSRC alerts

MSRC / By MSRC Team / March 2, 2021 Microsoft continues to investigate the extent of the recent Exchange Server on-premises attacks. Our goal is to provide the latest threat intelligence, Indicators of Compromise (IOC)s, and guidance across our products and solutions to help the community respond, harden infrastructure, and begin to recover from this unprecedented attack. As new...

 

Microsoft Internal Solorigate Investigation – Final Update

Posted on Thursday February 18, 2021  |  MSRC alerts

We believe the Solorigate incident is an opportunity to work with the community, to share information, strengthen defenses and respond to attacks. We have now completed our internal investigation into the activity of the actor and want to share our findings, which confirm that we found no evidence of access to production services or customer...

 

MSRC Security Researcher Recognition: 2021

Posted on Wednesday February 10, 2021  |  MSRC alerts

Wondering how to get into the 2021 MSRC Most Valuable Security Researcher list and get recognized during the Black Hat USA this August? Read on to learn more about the different paths you can take to get into the top researcher tiers. The MSRC Most Valuable Security Researcher (MVR) and MSRC Contributor are tiers in...

 

Continuing to Listen: Good News about the Security Update Guide API!

Posted on Tuesday February 09, 2021  |  MSRC alerts

Based on user feedback we have simplified programmatic access to the security update data by removing the authentication and API-Key requirements when using the CVRF API. You will no longer have to log in to obtain a personal API key to access the data. We're happy to make this valuable public information more freely available...

 

Multiple Security Updates Affecting TCP/IP:  CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086

Posted on Tuesday February 09, 2021  |  MSRC alerts

Today Microsoft released a set of fixes affecting Windows TCP/IP implementation that include two Critical Remote Code Execution (RCE) vulnerabilities (CVE-2021-24074, CVE-2021-24094) and an Important Denial of Service (DoS) vulnerability (CVE-2021-24086). The two RCE vulnerabilities are complex which make it difficult to create functional exploits, so they are not likely in the short term. We believe attackers will be able to create DoS exploits much more quickly and expect all three issues might be exploited with a DoS attack shortly after release. Thus, we recommend customers move...

 

New and Improved Report Abuse Portal and API!

Posted on Monday February 01, 2021  |  MSRC alerts

The Report Abuse (CERT) Portal and Report Abuse API have played a significant role in MSRC's response to suspected cyberattacks, privacy issues, and abuse originating from Microsoft Online Services. With the contributions from our wonderful community of reporters, we continue to gain insightful perspectives into the various types of attacks that threaten our online services, our cloud, and our customers. To further commit to MSRC's mission of responding to and defending against these types of security incidents, our team has...

 

Page:   1...949596979899100101102...120

Celebrating 35+ Years

Off-Site Cloud Backups

Contact Us

Support Ends for Windows 10 22H2, Windows Server 2012 R2, Exchange 2013, Office 2016