Name: Microsoft releases one-click mitigation tool for Exchange Server hacks | ZDNet
Brand: zdnet.com
SKU: zdnet-com-543
Availability: OnlineOnly

critic

Microsoft releases one-click mitigation tool for Exchange Server hacks | ZDNet

preview

Byfor| March 16, 2021 -- 08:41 GMT (01:41 PDT)| Topic:Microsoft has released a one-click mitigation tool as a stop-gap for IT admins who still need to apply security patches to protect their Exchange servers.&nbsp;Released , the tool is designed to mitigate the threat posed by four actively-exploited vulnerabilities that have collectively for organizations worldwide.&nbsp; Microsoft released emergency fixes for the critical vulnerabilities on March 2. However, the company estimates that at least 82,000 internet-facing servers are still unpatched and vulnerable to attack.&nbsp; The company previously released that administrators could run in order to see if their servers contained indicators of compromise (IOCs) linked to the vulnerabilities. In addition, Microsoft released security updates for out-of-support versions of Exchange Server. However, after working with clients and partners, Microsoft says there is a need for "a simple, easy to use, automated solution that would meet the needs of customers using both current and out-of-support versions of on-premise Exchange Server." See also: The has been designed to help customers that might not have security or IT staff on hand to help and has been tested across Exchange Server 2013, 2016, and 2019.&nbsp;It is important to note the tool is not an alternative to patching but should be considered a means to mitigate the risk of exploit until the update has been applied -- which should be completed as quickly as possible. &nbsp; The tool can be run on existing Exchange servers and includes as well as a URL rewrite mitigation for CVE-2021-26855, which can lead to remote code execution (RCE) attacks if exploited.&nbsp; "This tool is not a replacement for the Exchange security update but is the fastest and easiest way to mitigate the highest risks to internet-connected, on-premises Exchange Servers prior to patching," Microsoft says.&nbsp; In related news this week, Microsoft reportedly began investigating the potential leak of Proof-of-Concept (PoC) attack code supplied privately to cybersecurity ahead of the zero-day public patch release. The company says that no conclusions have yet been drawn over attack spikes related to the vulnerabilities.&nbsp;Have a tip? Get in touch securely via WhatsApp | Signal at +447713 025 499, or over at Keybase: charlie0Byfor| March 16, 2021 -- 08:41 GMT (01:41 PDT)| Topic:

Byfor| March 16, 2021 -- 08:41 GMT (01:41 PDT)| Topic:Microsoft has released a one-click mitigation tool as a stop-gap for IT admins who still need to apply security patches to protect their Exchange servers.&nbsp;Released , the tool is designed to mitigate the threat posed by four actively-exploited vulnerabilities that have collectively for organizations worldwide.&nbsp; Microsoft released emergency fixes for the critical vulnerabilities on March 2. However, the company estimates that at least 82,000 internet-facing servers are still unpatched and vulnerable to attack.&nbsp; The company...

public

Charlie Osborne

ZDNet is a business technology news website published by CBS Interactive, along with TechRepublic. The brand was founded on April 1, 1991, as a general interest technology portal from Ziff Davis and evolved into an enterprise IT-focused online publication owned by CNET Networks.

zdnet.com

Credible

Speculation

Anecdotal Evidence

Generalization

Stacking the Deck

Appeal to Authority

Straw Man

Slippery Slope

Emotional Appeal

Red Herring

False Dilemma

Illogical

Moral Equivalency

Ad Hominem

Correlation w/o Causation

Semantics

Begging the Question

Faulty Analogy

Non Sequitur

Bandwagon

Dogmatism

Failing Occam's Razor

Biased

Pure Opinion

Hit Piece

Racial Bias

National Bias

Religious Bias

Financial Incentive

Political Agenda

Gender Bias

Misused Image/Video

Study Misinterpreted

Mistake

Misused Term

Science Misrepresented

Factual Error

Satire

Surface Level

Lack of Reliable Sources

Sensational

Not Credible

Investigative

Balanced

Well Sourced

Great Context

sports

entertainment

U.S.

international

business

technology

science

culture

politics

media

health

Microsoft releases one-click mitigation tool for Exchange Server hacks | ZDNet

No article scores yet.

CRITIC REVIEWS

PUBLIC REVIEWS