Over 20k Microsoft Exchange servers risked in exploitable vulnerabilities

https://www.bleepingcomputer.com/news/security/over-20-000-vulnerable-microsoft-exchange-servers-exposed-to-attacks/

Some of these CVEs go back years, including the days of ProxyLogon shell attacks. All these have patches available. There are some 30.5k unsupported versions of Exchange as of November, 2023. Read more here.

November, 2023 Patch Tuesday addresses 63 vulnerabilities; five of them are zero days.

https://thehackernews.com/2023/11/alert-microsoft-releases-patch-updates.html

Microsoft is urging that on-prem Exchange servers be secured

https://thehackernews.com/2023/01/microsoft-urges-customers-to-secure-on.html

CISA, the FBI and the NSA release a joint advisory detailing APT activity for Microsoft Exchange server exploitation, particularly in the defense sector since last year

https://www.cisa.gov/uscert/ncas/alerts/aa22-277a

Microsoft Exchange Zero-Day being exploited in the wild.

https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-new-exchange-zero-days-are-used-in-attacks/

Customer Guidance for Zero-Day
https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/

https://isc.sans.edu/diary/Exchange+Server+0Day+Actively+Exploited/29106/

IIS and Exchange Servers backdoored by SessionManager malware

https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-worldwide-backdoored-with-new-malware/

The SessionManager IIS backdoor

https://securelist.com/the-sessionmanager-iis-backdoor/106868/

https://www.darkreading.com/attacks-breaches/new-sessionmanager-exchange-server-backdoor-globally

CISA/FBI/ACSC/NCSC release joint advisory concerning vulnerabilities in Fortinet and Microsoft Exchange products. These are not new vulnerabilities but remain exploited

https://www.bleepingcomputer.com/news/security/us-uk-warn-of-iranian-hackers-exploiting-microsoft-exchange-fortinet/

CVE-2021-42321: New Exchange Zero-Day vulnerability being attacked now

https://www.bleepingcomputer.com/news/microsoft/microsoft-urges-exchange-admins-to-patch-bug-exploited-in-the-wild/

Cisco Talos: Exchange servers being exploited for ransomware … again

https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html

Microsoft patches 71 vulnerabilities including 4 Zero-Days; one of which is under active exploitation

https://thehackernews.com/2021/10/update-your-windows-pcs-immediately-to.html