MS Exchange zero-days: The calm before the storm?

CVE-2022-41040 and CVE-2022-41082, the two exploited MS Exchange zero-days that still have no official fix, have been added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog. But mitigating the risk of exploitation until patches are ready will require patience and doggedness, as Microsoft is still revising its advice to admins and network defenders, and still working on the patches. Exchange zero-days: The current situation CVE-2022-41040 and CVE-2022-41082 have been publicly documented last Wednesday, by researchers with … More →

The post …

0 day don't miss exchange exploit hot stuff microsoft microsoft exchange zero-days