Microsoft: Two New 0-Day Flaws in Exchange Server

Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches to plug the security holes. In the meantime, it is urging a subset of Exchange customers to enable a setting that could help mitigate ongoing attacks.

cve-2022-41040 cve-2022-41082 exchange exchange server flaws gtsc latest warnings microsoft microsoft exchange server zero-day server steven adair the coming storm time to patch volexity zimbra collaboration suite