Microsoft says China-backed hackers are exploiting Exchange zero-days

Cyber has moved to center of national security strategy.

President’s national security adviser urges Americans to patch a newly discovered vulnerability. IIRC This is a first. Didn’t happen in NotPetya, or more recently in SolarWinds.

"We are closely tracking Microsoft’s emergency patch for previously unknown vulnerabilities in Exchange Server software and reports of potential compromises of U.S. think tanks and defense industrial base entities. We encourage network owners to patch ASAP: https://msrc-blog.microsoft.com/2021/03/02/mul"

https://twitter.com/JakeSullivan46/status/1367660450855477256

 

I patched my server the day the patch was released. Did not see any sign of being compromised after looking at the Exchange logs etc.

 

White House fears significant number of organisations caught in Microsoft hack

https://www.abc.net.au/news/2021-03...ficant-hack-microsoft-exchange-email/13223508

 

"Four new hacking groups have joined an ongoing offensive against Microsoft’s email servers

Chinese hackers targeting Microsoft Exchange servers were joined by a feeding frenzy of other adversaries this week.

A Chinese government-linked hacking campaign revealed by Microsoft this week has ramped up rapidly. At least four other distinct hacking groups are now attacking critical flaws in Microsoft’s email software in a cyber campaign the US government describes as 'widespread domestic and international exploitation' with the potential to impact hundreds of thousands of victims worldwide..."

https://www.technologyreview.com/2021/03/06/1020442/four-new-hacking-groups-microsoft-email-servers/