Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw

Microsoft says Cuba ransomware threat actors are hacking their way into victims' networks via Microsoft Exchange servers unpatched against a critical server-side request forgery (SSRF) vulnerability also exploited in Play ransomware attacks. [...]

attacks critical cuba cuba ransomware exchange exploited flaw forgery hacking microsoft microsoft exchange networks owassrf play play ransomware ransomware ransomware attacks request security server servers server-side request forgery ssrf threat threat actors unpatched vulnerability