Microsoft updates guidance for ‘ProxyNotShell’ bugs after researchers get around mitigations

Microsoft has updated the guidance it provided for two zero-day vulnerabilities discovered last week affecting Exchange Server software. The original guidance provided for the bugs, which are known colloquially as “ProxyNotShell”, was found to be insufficient in addressing the issues, according to several security researchers who spent the weekend examining it.  Dray Agha, senior threatOps […]

The post Microsoft updates guidance for ‘ProxyNotShell’ bugs after researchers get around mitigations appeared first on The Record by Recorded Future.

bugs cve-2022-41040 cve-2022-41082 cybercrime guidance industry microsoft microsoft exchange microsoft updates mitigations nation state :proxynotshell proxyshell researchers updates vulnerability zero-day