Microsoft Exchange servers are getting hacked via ProxyShell exploits

PDF Document

It appears your Web browser is not configured to display PDF files. Download adobe Acrobat or click here to download the PDF file.

License

All rights reserved.

Creator(s)

Contributed date

January 9, 2023 - 9:18am

Critical Commentary

2021/08/12 : Lawrence Abrams explains how "Orange Tsai at a Black Hat talk about recent Microsoft Exchange vulnerabilities he discovered when targeting the Microsoft Exchange Client Access Service (CAS) attack surface.
After watching the talk, security researchers PeterJson and Nguyen Jang published more detailed technical information about successfully reproducing the ProxyShell exploit."
Then several hackers used the threat. 

This event shows full disclosure is still alive.