Microsoft Warn of Two New Exchange Server 0-Day Vulnerabilities

Microsoft Exchange Server has two new 0-day vulnerabilities, including one that could allow a remote code execution attack.

Microsoft Warn of Two New Exchange Server 0-Day Vulnerabilities

Microsoft Exchange Server has taken a beating over the last 12-18 months. A slew of bugs, breaches, and vulnerabilities have befallen the mail and calendaring service. As we have to wait until 2025 for the next version, the current Exchange Server is all we’ve got. Unfortunately, Microsoft is confirming today two new zero-day vulnerabilities on the platform.

The company is tracking the flaws as CVE-2022-41040 and CVE-2022-41082, respectively. Microsoft describes the first as a Server-Side Request Forgery (SSRF) bug, while the second could allow threat actors to conduct a remote code execution (RCE) attack through PowerShell. However, an attack would require the malicious actor to have authenticated access to Microsoft Exchange Server.

Furthermore, Microsoft says Exchange Server users do not need to do anything as the vulnerabilities are only for on-premises versions of Exchange Server 2013, 2016, and 2019.

Evens so, Microsoft has yet to issue a patch for either zero-day. As such, the company is not currently offering many details about how an attack would look. This is simply to avoid giving threat actors information that could help them start an attack chain.

Although, Microsoft is providing workarounds such as putting a blocking rule in URL Rewrite Instructions and blocking ports 5986 (HTTPS) and 5985 (HTTP) in Remote PowerShell.

Difficult Time

It has been a rough 18 months for Microsoft Exchange servers, including a dismal 2021 where attacks on the service became the biggest cyberthreat of the year. Then the LockFile ransomware became a problem.

In April, Microsoft confirmed the Hive ransomware-as-a-service was targeting Exchange Server.

Tip of the day: Having problems with pop-ups and unwanted programs in Windows? Try the hidden adware blocker of Windows Defender. We show you how to turn it on in just a few steps.

News Related


iQOO 11 Is Now Launching on December 8

iQOO 11 series was expected to hit the stage in China on December 2 but the sudden demise of former Chinese President Jiang Zemin postponed the launch. The company has ... Read more »

FIFA World Cup Qatar 2022: Technology Used During the Matches That You May Have Missed

The FIFA World Cup 2022 is underway in Qatar. And it’s not your traditional World Cup anymore. So, here’s a lowdown on all kinds of technology used in the most iconic sporting event of the year. Read more »

Lowongan Kerja Medan, Focal Point Medan Buka Loker Sebagai Staf

TRIBUN-MEDAN.COM���Focal Point Medan merupakan�salah satu pusat perbelanjaan dan hiburan komersial di Medan�dan saat ini sedang membuka lowongan kerja di Medan yang dikutip dari instagram @medanfp dengan posisi sebagai�Staff Accounting, Staff ... Read more »

Samsung Galaxy S21 FE Users in India Get One UI 5.0 Update

Oddly, the new One UI 5.0 update does not bring the November security patch with it.  Read more »

Salesforce Cybersecurity Executive Leaves the Company, Days After Co-CEO Bret Taylor's Resignation

A cybersecurity executive of Salesforce Inc. is set to leave the company, just days after the surprise resignation of Co-Chief Executive Officer Bret Taylor. (Photo : Stephen Lam/Getty Images)SAN FRANCISCO, ... Read more »

Audi RS E-Tron GT Ground Clearance, Boot Space & Dimensions

Audi RS E-Tron GT Ground Clearance, Boot Space & Dimensions This article will give you details about the dimensions, or length, width, height and wheelbase, of the Audi RS E-Tron ... Read more »

Samsung Galaxy M04 India Launch Soon, Said to Be Priced Under Rs 10,000

The Galaxy M04 will is expected to make its debut soon in India. Read more »

Volkswagen Virtus Sedan 5 Star Safety Rating – Latin NCAP

Volkswagen Virtus made in India that scored 5-stars in Latin NCAP, came with 6 airbags and active safety features like auto emergency braking Volkswagen Virtus Crash Test Latin NCAP When ... Read more »

iQOO 11 Series Confirmed to Launch on December 8: Specifications, Features

The company might also launch the iQOO Neo 7 SE alongside the flagship series. Read more »

Windows 11「かゆいところに手が届く」新機能をInsider Previewで公開

「システムトレイの時計に秒を表示する」にチェックする  2022年11月18日、Windows 11 Insider Preview Build 25247がDevチャネルにリリースされた。それほど大きくはないものの、かゆいところに手が届くような新機能をいくつも搭載しているので、まとめて紹介しよう。 時計が秒表示になった  筆者的にインパクトがあったのが、システムトレイに表示されている時計が秒表示に対応したこと。ただそれだけだが、秒表示が好きなので、もちろんすぐオンにした。「設定」→「個人用設定」→「タスクバー」→「タスクバーの動作」→「システムトレイの時計に秒を表示する」にチェックを入れればいい。  ただし、時計の秒表示はInsider Previewユーザーの中でも順次展開中のようで、バージョンアップしても設定が表示されないこともある。どうしても試してみたい場合は、上級者向けツール「ViVeTool」を使えば有効にできる。 スタートボタンを右クリックし、管理者権限でターミナルを起動する  Github(から「」(11月27日現在)をダウンロードして、展開する。続けて、展開した「ViVeTool.exe」のパスを取得して、管理者権限で開いたターミナルにペーストし、前後の「”」を削除。続けて、オプションの「 /enable /id:41314201」と入力し、「Enter」を押せば良い。「Successfully set feature configuration(s)」と表示されれば成功だ。 「ViVeTool.exe」のコマンドを入力し、「Successfully set feature configuration(s)」と表示されれば成功  他の変更ポイントとしては、エネルギーに関する提案として、「設定」の「電源」→「Energy Recommendations」で、二酸化炭素排出量を削減するための設定が用意されている。筆者の環境では3分後にデバイスをスリープ状態にしたり、画面をオフにする設定など4項目が表示されていた。横にある「適用」ボタンをクリックすれば設定が変更され、「Apply all」をクリックすれば全適用できる。 電力を節約するための設定が用意された Windows Insider Blogで紹介されていた画面 ... Read more »

Does Apple really care about your privacy? The TRUTH revealed

Most large brands in the tech space claim to protect the privacy of their users. However, we have seen deliberate abuse of user data again and again from these companies. ... Read more »

Rackspace Technology Still Investigating Cause of ‘System Disruption’

Rackspace has yet to determine what is causing its still active outage. The American cloud computing services provider revealed that it is still investigating what’s behind the “service disruption” it ... Read more »

O Steve Jobs είπε την εταιρία του Apple για έναν πολύ παράξενο λόγο

O Steve Jobs είπε την εταιρία του Apple για έναν πολύ παράξενο λόγο Εκτός κι αν ζούσες σε κάποια σπηλιά τα τελευταία τριάντα χρόνια, τότε σίγουρα ξέρεις για ποια Apple ... Read more »

Maruti Price Hike Jan 2023 – Alto, WagonR, Swift, Baleno, Brezza

Just like other carmakers, Maruti Suzuki has attributed the price hike to increased cost pressure from overall inflation Image – Kalyani Motors In compliance with disclosure norms, Maruti Suzuki India ... Read more »

Pokemon Scarlet & Violet - What To Do Once You've Finished The Game

Pokémon Scarlet & Violet is a big game, and there’s even more to do after the credits roll. Here’s what to do once you beat the game. Read more »

Irish corporate IT users are unwilling to use Microsoft’s browser

Irish workers are locked in a battle with their bosses over the use of Microsoft software. Employees are rejecting their companies’ preferred online systems, despite IT department warnings that the ... Read more »

Car Sales Nov 2022 – Maruti, Hyundai, Tata, Honda, Skoda, VW

At the top of Car sales November 2022 chart, Maruti is losing sales MoM, while Hyundai’s stood stagnant and Tata’s grew Image – Khushal Kumar There hasn’t been much action ... Read more »

Xiaomi 13 and Xiaomi 13 Pro Key Specifications Leaked, Said to Come With Up to 12GB RAM and 512GB storage Models

The Xiaomi 13 series could arrive in India during the first quarter of 2023. Read more »

Redmi Note 12 Pro 4G spotted on the IMEI database before launch

The Redmi Note 12 Pro 4G smartphone’s launch could be right around the corner. The IMEI database listing of the handset has been spotted. Xiaomi is on the verge of ... Read more »

Telkomsel Gelar IndonesiaNEXT Season 7

Telkomsel kembali menggelar IndonesiaNext yang telah memasuki musim atau tahun ketujuh. Jakarta: Telkomsel kembali menggelar IndonesiaNext yang telah memasuki musim atau tahun ketujuh. Program tanggung jawab sosial Telkomsel ini telah ... Read more »

A câmera está ligada no Windows 11? Veja como ativar indicador

A câmera está ligada no Windows 11? Veja como ativar indicador Olhe para a webcam do seu computador e veja se há um LED que indica se a câmera está ... Read more »

Here are some Microsoft Excel tips you can use to inch closer to mastery

First released way back in 1985, Microsoft Excel has since become most people’s favourite spreadsheet application. While competitor Google Sheets may be favoured for collaboration, Excel is superior to any ... Read more »

Gran Turismo 7 To Celebrate Series' 25th Anniversary With Exclusive In-Game Content

Gran Turismo 7 will be rewarding players as part of the 25 anniversary. Read more »

How to Generate A Public/Private SSH Key in Linux

If you are using SSH frequently to connect to a remote host, one way to secure your SSH server is to use a public/private SSH key so that no password ... Read more »

Pengumuman, Pendaftaran IndonesiaNext Season 7 Diperpanjang, Begini Cara Daftarnya

Pengumuman, Pendaftaran IndonesiaNext Season 7 Diperpanjang, Begini Cara Daftarnya, JAKARTA SELATAN – Telkomsel mengumumkan akan memperpanjang pendaftaran IndonesiaNext Season 7 hingga 18 Desember 2022 mendatang. Hal itu diungkapkan langsung ... Read more »

A Cyberpunk 2077 Game Of The Year Edition Is Reportedly Coming In 2023

Night City has big plans for 2023. Read more »

Massive Valorant Agent Changes & Spectre Nerf Coming Soon, PBE Server Reveals

There’s a huge patch coming to Valorant in the near future, and while it isn’t bringing any new content in the form of maps or Agents, it’s set to overhaul ... Read more »

Apple’s Emergency SOS Feature Saves Yet Another Life

When Apple launched the iPhone 14 series. There were lots of talking points about the features that these latest flagship lineups came with. For example, the Dynamic Island feature was ... Read more »

How To Reset Windows 11 Network Settings

Key Takeaways: Network issues are commonly reported by users who try to connect to a network. It is possible that your network adapter might have some issues. You can try ... Read more »

Microsoft Flight Simulator Embraer E-Jets Announced; F-4 Phantom Gets New Screenshots, Detroit Airport Released

Today, third-party developers had relevant news and a release to share for Microsoft Flight Simulator add-ons including aircraft and scenery. We start with an announcement from Aerosoft and its partner ... Read more »

Saskatoon’s emergency wellness centre expected to hit max capacity Friday night

The transition to the new Saskatoon Emergency Wellness Centre is almost complete, and spaces are filling up fast. The new location is a replacement for the old location on First ... Read more »

Build Your Own Mechanical Keyboard #HWZtechmeup 2022 Ep 03

Summary Give a lady a keyboard, and she types for a day. Teach a lady to build a fully-customised mechanical keyboard, and she will type for a lifetime… Read more »

Programmierschule „42“: Lernen wie im Videospiel

In der Coding Academy 42 in Berlin gibt es keine Lehrer und keine Altersbeschränkung: Jeder mit Interesse an der IT kann mitmachen. Eine von der deutschen Industrie mit Millionenbeträgen geförderte ... Read more »

Estreias: “Morte, Morte, Morte”, “Era uma Vez um Gênio” e os novos filmes em streaming

Estreias: “Morte, Morte, Morte”, “Era uma Vez um Gênio” e os novos filmes em streaming A programação de lançamentos nas plataformas de assinatura e locação digital continuam tocando o terror ... Read more »

Infinix Zero 5G 2023 arrives with Dimensity 1080 and $239 price tag

The brands under the Transsion group are increasing their efforts in the market. While Tecno is set to launch what may be the best device in its story with MediaTek ... Read more »

Argentina redobla su lobby comercial con EE.UU. para que Biden "levante el freno de mano"

Luego de la reunión bilateral que el presidente Alberto Fernández tuvo con su par chino, Xi Jinping, en el medio de la cumbre del G20, el gobierno argentino volvió a ... Read more »

Azur Lane Announces Atelier Ryza Collaboration

Learn More About the People of Atelier Ryza with Various Themed Mini-Events and Rewards! Azur Lane developer Yostar announces a collaboration between its mobile naval shoot ‘em up the console JRPG series ... Read more »

A sneak peek inside the Holly Jolly Market in downtown London, Ont.

There’s no shortage of holiday spirit at Covent Garden Market as the downtown London, Ont., vendor venue hosts its all-new Holly Jolly Market. On Friday, reporters were given a tour ... Read more »

HyperX ProCast

HyperX's first XLR microphone offers truly incredible sound for a cost. Read more »

TSMC's 2024 Arizona fab to upgrade from 5nm to 4nm after Apple's request

The big picture: Taiwan Semiconductor Manufacturing Company’s (TSMC) Arizona factory project has become more apparent over the last few weeks. The company intends to move some of the most advanced ... Read more »
Breaking thailand news, thai news, thailand news Verified News Story Network