Double Zero-day Attack: Microsoft Exchange Servers Under Active Exploitation!

  Microsoft warned that two zero-day vulnerabilities ( CVE-2022-41040 and CVE-2022-41082 ) are being used against Exchange Server without a patch. CVE-2022-41040 is a Server-Side Request Forgery (SSRF) vulnerability, and CVE-2022-41082 allows remote code execution when PowerShell is accessible to the attacker, Microsoft explained. Microsoft has not released the patch for these vulnerabilities yet. Microsoft […]

The post .