One Article Review
| Source |  InfoSecurity Mag |
|---|---|
| Identifiant | 7225934 |
| Date de publication | 2022-09-30 14:30:00 (vue: 2022-09-30 15:07:39) |
| Titre | Microsoft Confirms Two Exchange Zero-Day Vulnerabilities (Recyclage) |
| Texte | The vulnerabilities were first discovered by Vietnamese cybersecurity firm GTSC |
| Envoyé | Oui |
| Condensat | confirms cybersecurity day discovered exchange firm first gtsc microsoft two vietnamese vulnerabilities zero |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
Les reprises de l'article (1):
| Source |  Security Affairs |
|---|---|
| Identifiant | 7221958 |
| Date de publication | 2022-09-30 10:18:05 (vue: 2022-09-30 11:07:28) |
| Titre | Microsoft confirms Exchange zero-day flaws actively exploited in the wild |
| Texte | >Microsoft confirmed that two recently disclosed zero-day flaws in Microsoft Exchange are being actively exploited in the wild. Microsoft confirmed that two zero-day vulnerabilities in Microsoft Exchange recently disclosed by researchers at cybersecurity firm GTSC are being actively exploited in the wild. The IT giant has promptly started the investigation into the two zero-day vulnerabilities […] |
| Envoyé | Oui |
| Condensat | >microsoft actively are being confirmed confirms cybersecurity day disclosed exchange exploited firm flaws giant gtsc has investigation microsoft promptly recently researchers started two vulnerabilities wild zero |
| Tags | |
| Stories | |
| Notes | |
| Move |
|
L'article ressemble à 1 autre(s) article(s):
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
|
2022-10-04 06:40:34 | (Déjà vu) Microsoft mitigations for recently disclosed Exchange zero-days can be easily bypassed (lien direct) | >The mitigation shared by Microsoft for the two recently disclosed Exchange zero-day vulnerabilities can be bypassed, expert warns. Last week, Microsoft confirmed that two zero-day vulnerabilities in Microsoft Exchange recently disclosed by researchers at cybersecurity firm GTSC are being actively exploited in the wild. The first flaw, tracked as CVE-2022-41040, is a Server-Side Request Forgery (SSRF) issue. […] |