#proxynotshell — Public Fediverse posts on home.social

Analyst207 @[email protected] · 2026-05-13 · 14:38 UTC

China-linked hackers exploit Microsoft Exchange in Azerbaijani energy firm attacks.

A group of China-linked hackers, known as FamousSparrow, launched a sustained cyberattack on an Azerbaijani oil and gas company, exploiting Microsoft Exchange vulnerabilities in a multi-wave intrusion that spanned three months. The attackers used the ProxyNotShell exploit to gain and maintain access to…

https://osintsights.com/china-linked-hackers-exploit-microsoft-exchange-in-azerbaijani-energy-firm-attac?utm_source=mastodon&utm_medium=social

#ChinalinkedHackers #MicrosoftExchange #Proxynotshell #Famoussparrow #EarthEstries

#chinalinkedhackers #microsoftexchange #proxynotshell #famoussparrow #earthestries

Kevin Beaumont @[email protected] · 2024-03-25 · 05:14 UTC

Later today, the UK government plan to link the Microsoft Exchange #ProxyNotShell incident at the Electoral Commission to China. https://doublepulsar.com/uk-electoral-commission-had-an-unpatched-microsoft-exchange-server-vulnerability-5436f3f5ec2c

Edit: I should say, they might have got caught up in ProxyShell too.

#proxynotshell

Kevin Beaumont @[email protected] · 2024-03-25 · 05:14 UTC

Later today, the UK government plan to link the Microsoft Exchange #ProxyNotShell incident at the Electoral Commission to China. https://doublepulsar.com/uk-electoral-commission-had-an-unpatched-microsoft-exchange-server-vulnerability-5436f3f5ec2c

Edit: I should say, they might have got caught up in ProxyShell too.

#proxynotshell

Kevin Beaumont @[email protected] · 2024-03-25 · 05:14 UTC

Later today, the UK government plan to link the Microsoft Exchange #ProxyNotShell incident at the Electoral Commission to China. https://doublepulsar.com/uk-electoral-commission-had-an-unpatched-microsoft-exchange-server-vulnerability-5436f3f5ec2c

Edit: I should say, they might have got caught up in ProxyShell too.

#proxynotshell

Kevin Beaumont @[email protected] · 2024-03-25 · 05:14 UTC

Later today, the UK government plan to link the Microsoft Exchange #ProxyNotShell incident at the Electoral Commission to China. https://doublepulsar.com/uk-electoral-commission-had-an-unpatched-microsoft-exchange-server-vulnerability-5436f3f5ec2c

Edit: I should say, they might have got caught up in ProxyShell too.

#proxynotshell

Kevin Beaumont @[email protected] · 2024-03-25 · 05:14 UTC

Later today, the UK government plan to link the Microsoft Exchange #ProxyNotShell incident at the Electoral Commission to China. https://doublepulsar.com/uk-electoral-commission-had-an-unpatched-microsoft-exchange-server-vulnerability-5436f3f5ec2c

Edit: I should say, they might have got caught up in ProxyShell too.

#proxynotshell

Kevin Beaumont @[email protected] · 2023-08-09 · 12:19 UTC

#ProxyNotShell in Exchange Server fingered in UK Electoral Commission hack.

TechCrunch found Electoral Commission were using on prem Exchange.

I had a look via @shodan history feature - their Exchange Server, with OWA enabled, was online until later in 2022 (when the incident began) - and didn't have ProxyNotShell patches installed, as Microsoft hadn't released them.

The mitigations MS released were bypassable, as seen in the Rackspace Hosted Exchange hack.

https://techcrunch.com/2023/08/09/parsing-uk-electoral-commission-cyberattack/

#proxynotshell

Kevin Beaumont @[email protected] · 2023-08-09 · 12:19 UTC

#ProxyNotShell in Exchange Server fingered in UK Electoral Commission hack.

TechCrunch found Electoral Commission were using on prem Exchange.

I had a look via @shodan history feature - their Exchange Server, with OWA enabled, was online until later in 2022 (when the incident began) - and didn't have ProxyNotShell patches installed, as Microsoft hadn't released them.

The mitigations MS released were bypassable, as seen in the Rackspace Hosted Exchange hack.

https://techcrunch.com/2023/08/09/parsing-uk-electoral-commission-cyberattack/

#proxynotshell

Kevin Beaumont @[email protected] · 2023-08-09 · 12:19 UTC

#ProxyNotShell in Exchange Server fingered in UK Electoral Commission hack.

TechCrunch found Electoral Commission were using on prem Exchange.

I had a look via @shodan history feature - their Exchange Server, with OWA enabled, was online until later in 2022 (when the incident began) - and didn't have ProxyNotShell patches installed, as Microsoft hadn't released them.

The mitigations MS released were bypassable, as seen in the Rackspace Hosted Exchange hack.

https://techcrunch.com/2023/08/09/parsing-uk-electoral-commission-cyberattack/

#proxynotshell

Kevin Beaumont @[email protected] · 2023-08-09 · 12:19 UTC

#ProxyNotShell in Exchange Server fingered in UK Electoral Commission hack.

TechCrunch found Electoral Commission were using on prem Exchange.

I had a look via @shodan history feature - their Exchange Server, with OWA enabled, was online until later in 2022 (when the incident began) - and didn't have ProxyNotShell patches installed, as Microsoft hadn't released them.

The mitigations MS released were bypassable, as seen in the Rackspace Hosted Exchange hack.

https://techcrunch.com/2023/08/09/parsing-uk-electoral-commission-cyberattack/

#proxynotshell

Kevin Beaumont @[email protected] · 2023-08-09 · 12:19 UTC

#ProxyNotShell in Exchange Server fingered in UK Electoral Commission hack.

TechCrunch found Electoral Commission were using on prem Exchange.

I had a look via @shodan history feature - their Exchange Server, with OWA enabled, was online until later in 2022 (when the incident began) - and didn't have ProxyNotShell patches installed, as Microsoft hadn't released them.

The mitigations MS released were bypassable, as seen in the Rackspace Hosted Exchange hack.

https://techcrunch.com/2023/08/09/parsing-uk-electoral-commission-cyberattack/

#proxynotshell

Marcel SIneM(S)US @[email protected] · 2023-01-29 · 08:43 UTC

#ProxyShell & Co.: #Microsoft gibt Tipps, um #Exchange Server abzusichern | heise online https://www.heise.de/news/ProxyShell-Co-Microsoft-gibt-Tipps-um-Exchange-Server-abzusichern-7472639.html #MicrosoftExchange #ProxyNotShell

#proxynotshell #microsoftexchange #exchange #microsoft #proxyshell

Marcel SIneM(S)US @[email protected] · 2023-01-29 · 08:43 UTC

#ProxyShell & Co.: #Microsoft gibt Tipps, um #Exchange Server abzusichern | heise online https://www.heise.de/news/ProxyShell-Co-Microsoft-gibt-Tipps-um-Exchange-Server-abzusichern-7472639.html #MicrosoftExchange #ProxyNotShell

#proxynotshell #microsoftexchange #exchange #microsoft #proxyshell

Marcel SIneM(S)US @[email protected] · 2023-01-08 · 08:49 UTC

Beim #Cloud-Anbieter #Rackspace hat die Play-#Ransomware zugeschlagen | heise online https://www.heise.de/news/Beim-Cloud-Anbieter-Rackspace-hat-die-Play-Ransomware-zugeschlagen-7450344.html #ProxyNotShell #Malware #MicrosoftExchange

#microsoftexchange #malware #proxynotshell #ransomware #rackspace #cloud

Marcel SIneM(S)US @[email protected] · 2023-01-08 · 08:49 UTC

Beim #Cloud-Anbieter #Rackspace hat die Play-#Ransomware zugeschlagen | heise online https://www.heise.de/news/Beim-Cloud-Anbieter-Rackspace-hat-die-Play-Ransomware-zugeschlagen-7450344.html #ProxyNotShell #Malware #MicrosoftExchange

#microsoftexchange #malware #proxynotshell #ransomware #rackspace #cloud

didib_photo 📷 @[email protected] · 2023-01-07 · 08:58 UTC

Die seit September bekannte Schwachstelle #ProxyNotShell von #Microsoft #ExchangeServer ist auf hunderten Servern in der #Schweiz nicht behoben worden. #Patch steht längst zur Verfügung.

Gleichzeitig sei #ITSecurity die oberste Priorität der #CIO.🤔

https://www.netzwoche.ch/news/2023-01-04/hunderte-schweizer-exchange-server-noch-ohne-proxynotshell-patch

http://www.netzwoche.ch/news/2022-12-07/die-plaene-der-schweizer-cios-fuer-2023 (siehe Grafik im Artikel)

#cybersecurity #techstuff

#proxynotshell #microsoft #exchangeserver #schweiz #patch #itsecurity

didib_photo 📷 @[email protected] · 2023-01-07 · 08:58 UTC

Die seit September bekannte Schwachstelle #ProxyNotShell von #Microsoft #ExchangeServer ist auf hunderten Servern in der #Schweiz nicht behoben worden. #Patch steht längst zur Verfügung.

Gleichzeitig sei #ITSecurity die oberste Priorität der #CIO.🤔

https://www.netzwoche.ch/news/2023-01-04/hunderte-schweizer-exchange-server-noch-ohne-proxynotshell-patch

http://www.netzwoche.ch/news/2022-12-07/die-plaene-der-schweizer-cios-fuer-2023 (siehe Grafik im Artikel)

#cybersecurity #techstuff

#proxynotshell #microsoft #exchangeserver #schweiz #patch #itsecurity

didib_photo 📷 @[email protected] · 2023-01-07 · 08:58 UTC

Die seit September bekannte Schwachstelle #ProxyNotShell von #Microsoft #ExchangeServer ist auf hunderten Servern in der #Schweiz nicht behoben worden. #Patch steht längst zur Verfügung.

Gleichzeitig sei #ITSecurity die oberste Priorität der #CIO.🤔

https://www.netzwoche.ch/news/2023-01-04/hunderte-schweizer-exchange-server-noch-ohne-proxynotshell-patch

http://www.netzwoche.ch/news/2022-12-07/die-plaene-der-schweizer-cios-fuer-2023 (siehe Grafik im Artikel)

#cybersecurity #techstuff

#techstuff #cybersecurity #cio #itsecurity #patch #schweiz

Unveiled Security @[email protected] · 2023-01-06 · 03:35 UTC

On Dec 22, 2022, Unit42 released a threat brief on the new OWASSRF exploit method for Microsoft Exchange Server published by CrowdStrike

Threat Brief: OWASSRF Vulnerability Exploitation

https://unit42.paloaltonetworks.com/threat-brief-owassrf/

#OWASSRF #ProxyNotShell #Cybersecurity #CyberThreatIntelligence

#owassrf #proxynotshell #cybersecurity #cyberthreatintelligence

Unveiled Security @[email protected] · 2023-01-06 · 03:35 UTC

On Dec 22, 2022, Unit42 released a threat brief on the new OWASSRF exploit method for Microsoft Exchange Server published by CrowdStrike

Threat Brief: OWASSRF Vulnerability Exploitation

https://unit42.paloaltonetworks.com/threat-brief-owassrf/

#OWASSRF #ProxyNotShell #Cybersecurity #CyberThreatIntelligence

#owassrf #proxynotshell #cybersecurity #cyberthreatintelligence

Unveiled Security @[email protected] · 2023-01-06 · 03:35 UTC

On Dec 22, 2022, Unit42 released a threat brief on the new OWASSRF exploit method for Microsoft Exchange Server published by CrowdStrike

Threat Brief: OWASSRF Vulnerability Exploitation

https://unit42.paloaltonetworks.com/threat-brief-owassrf/

#OWASSRF #ProxyNotShell #Cybersecurity #CyberThreatIntelligence

#cyberthreatintelligence #cybersecurity #proxynotshell #owassrf

kantorkel @[email protected] · 2023-01-05 · 23:29 UTC

Wie die #HAW #Hamburg geransomwared wurde? Vielleicht so:

haw-mailer.haw-hamburg.de (15.11.2022)

Found Exchange server:
Build: 15.1.2507.13
Version: 2016CU23+KB5019077
Build date: 10/2022
Affected by CVE-2022-41040
Affected by CVE-2022-41082
Affected by CVE-2022-41078
Affected by CVE-2022-41123
Affected by CVE-2022-41079
Affected by CVE-2022-41080

[via @leakix] #OWASSRF #ProxyNotShell

#haw #hamburg #owassrf #proxynotshell

kantorkel @[email protected] · 2023-01-05 · 23:29 UTC

Wie die #HAW #Hamburg geransomwared wurde? Vielleicht so:

haw-mailer.haw-hamburg.de (15.11.2022)

Found Exchange server:
Build: 15.1.2507.13
Version: 2016CU23+KB5019077
Build date: 10/2022
Affected by CVE-2022-41040
Affected by CVE-2022-41082
Affected by CVE-2022-41078
Affected by CVE-2022-41123
Affected by CVE-2022-41079
Affected by CVE-2022-41080

[via @leakix] #OWASSRF #ProxyNotShell

#haw #hamburg #owassrf #proxynotshell

kantorkel @[email protected] · 2023-01-05 · 23:29 UTC

Wie die #HAW #Hamburg geransomwared wurde? Vielleicht so:

haw-mailer.haw-hamburg.de (15.11.2022)

Found Exchange server:
Build: 15.1.2507.13
Version: 2016CU23+KB5019077
Build date: 10/2022
Affected by CVE-2022-41040
Affected by CVE-2022-41082
Affected by CVE-2022-41078
Affected by CVE-2022-41123
Affected by CVE-2022-41079
Affected by CVE-2022-41080

[via @leakix] #OWASSRF #ProxyNotShell

#owassrf #proxynotshell #haw #hamburg

kantorkel @[email protected] · 2023-01-05 · 23:29 UTC

Wie die #HAW #Hamburg geransomwared wurde? Vielleicht so:

haw-mailer.haw-hamburg.de (15.11.2022)

Found Exchange server:
Build: 15.1.2507.13
Version: 2016CU23+KB5019077
Build date: 10/2022
Affected by CVE-2022-41040
Affected by CVE-2022-41082
Affected by CVE-2022-41078
Affected by CVE-2022-41123
Affected by CVE-2022-41079
Affected by CVE-2022-41080

[via @leakix] #OWASSRF #ProxyNotShell

#proxynotshell #owassrf #hamburg #haw

kantorkel @[email protected] · 2023-01-05 · 23:29 UTC

Wie die #HAW #Hamburg geransomwared wurde? Vielleicht so:

haw-mailer.haw-hamburg.de (15.11.2022)

Found Exchange server:
Build: 15.1.2507.13
Version: 2016CU23+KB5019077
Build date: 10/2022
Affected by CVE-2022-41040
Affected by CVE-2022-41082
Affected by CVE-2022-41078
Affected by CVE-2022-41123
Affected by CVE-2022-41079
Affected by CVE-2022-41080

[via @leakix] #OWASSRF #ProxyNotShell

#haw #hamburg #owassrf #proxynotshell

CyberGladius :verified: @[email protected] · 2023-01-05 · 22:12 UTC

#PlayRansomware's new exploit method to bypass mitigations to #ProxyNotShell is very interesting. I am going to need to build some new IOC for this.
#cybersecurity

https://www.crowdstrike.com/blog/owassrf-exploit-analysis-and-recommendations/

#cybersecurity #proxynotshell #playransomware

CyberGladius :verified: @[email protected] · 2023-01-05 · 22:12 UTC

#PlayRansomware's new exploit method to bypass mitigations to #ProxyNotShell is very interesting. I am going to need to build some new IOC for this.
#cybersecurity

https://www.crowdstrike.com/blog/owassrf-exploit-analysis-and-recommendations/

#playransomware #proxynotshell #cybersecurity

Eveline Meijer @EvelineMeijer · 2023-01-05 · 13:46 UTC

Flinke beschuldiging van #Rackspace: de mitigations die #Microsoft had aanbevolen voor de Exchange-kwetsbaarheid #ProxyNotShell zijn te omzeilen, wat de reden zou zijn dat Rackspace in december getroffen is door een grote cyberaanval. Het bedrijf installeerde de patch namelijk niet, maar vertrouwde op die mitigations.

https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#rackspace #microsoft #proxynotshell

Eveline Meijer @[email protected] · 2023-01-05 · 13:46 UTC

Flinke beschuldiging van #Rackspace: de mitigations die #Microsoft had aanbevolen voor de Exchange-kwetsbaarheid #ProxyNotShell zijn te omzeilen, wat de reden zou zijn dat Rackspace in december getroffen is door een grote cyberaanval. Het bedrijf installeerde de patch namelijk niet, maar vertrouwde op die mitigations.

https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#proxynotshell #microsoft #rackspace

Eveline Meijer @[email protected] · 2023-01-05 · 13:46 UTC

Flinke beschuldiging van #Rackspace: de mitigations die #Microsoft had aanbevolen voor de Exchange-kwetsbaarheid #ProxyNotShell zijn te omzeilen, wat de reden zou zijn dat Rackspace in december getroffen is door een grote cyberaanval. Het bedrijf installeerde de patch namelijk niet, maar vertrouwde op die mitigations.

https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#proxynotshell #microsoft #rackspace

Eveline Meijer @[email protected] · 2023-01-05 · 13:46 UTC

Flinke beschuldiging van #Rackspace: de mitigations die #Microsoft had aanbevolen voor de Exchange-kwetsbaarheid #ProxyNotShell zijn te omzeilen, wat de reden zou zijn dat Rackspace in december getroffen is door een grote cyberaanval. Het bedrijf installeerde de patch namelijk niet, maar vertrouwde op die mitigations.

https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#rackspace #microsoft #proxynotshell

Eveline Meijer @[email protected] · 2023-01-05 · 13:46 UTC

Flinke beschuldiging van #Rackspace: de mitigations die #Microsoft had aanbevolen voor de Exchange-kwetsbaarheid #ProxyNotShell zijn te omzeilen, wat de reden zou zijn dat Rackspace in december getroffen is door een grote cyberaanval. Het bedrijf installeerde de patch namelijk niet, maar vertrouwde op die mitigations.

https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#proxynotshell #microsoft #rackspace

AG Connect @AGConnect · 2023-01-05 · 13:44 UTC

Hostingreus Rackspace had de grote #Exchange-kwetsbaarheid #ProxyNotShell niet gepatcht, maar vertrouwde op beperkende maatregelen van #Microsoft. Die mitigations zijn echter te omzeilen, wat de softwareleverancier volgens Rackspace níet heeft aangegeven.
https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#exchange #proxynotshell #microsoft

AG Connect @[email protected] · 2023-01-05 · 13:44 UTC

Hostingreus Rackspace had de grote #Exchange-kwetsbaarheid #ProxyNotShell niet gepatcht, maar vertrouwde op beperkende maatregelen van #Microsoft. Die mitigations zijn echter te omzeilen, wat de softwareleverancier volgens Rackspace níet heeft aangegeven.
https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#microsoft #proxynotshell #exchange

AG Connect @[email protected] · 2023-01-05 · 13:44 UTC

Hostingreus Rackspace had de grote #Exchange-kwetsbaarheid #ProxyNotShell niet gepatcht, maar vertrouwde op beperkende maatregelen van #Microsoft. Die mitigations zijn echter te omzeilen, wat de softwareleverancier volgens Rackspace níet heeft aangegeven.
https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#microsoft #proxynotshell #exchange

AG Connect @[email protected] · 2023-01-05 · 13:44 UTC

Hostingreus Rackspace had de grote #Exchange-kwetsbaarheid #ProxyNotShell niet gepatcht, maar vertrouwde op beperkende maatregelen van #Microsoft. Die mitigations zijn echter te omzeilen, wat de softwareleverancier volgens Rackspace níet heeft aangegeven.
https://www.agconnect.nl/artikel/rackspace-beschuldigt-microsoft-indirect-van-grote-ransomware-aanval

#exchange #proxynotshell #microsoft

Marcel SIneM(S)US @[email protected] · 2023-01-05 · 07:27 UTC

Erstaunlich, dass nach zwei Monaten immer noch so viele Server nicht gepatcht sind...

Jetzt patchen! Noch 60.000 #Exchange-Server für #ProxyNotShell-Attacken anfällig | heise online https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html #Microsoft #MicrosoftExchange

#microsoftexchange #microsoft #proxynotshell #exchange

Marcel SIneM(S)US @[email protected] · 2023-01-05 · 07:27 UTC

Erstaunlich, dass nach zwei Monaten immer noch so viele Server nicht gepatcht sind...

Jetzt patchen! Noch 60.000 #Exchange-Server für #ProxyNotShell-Attacken anfällig | heise online https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html #Microsoft #MicrosoftExchange

#microsoftexchange #microsoft #proxynotshell #exchange

heise online @[email protected] · 2023-01-04 · 12:25 UTC

Jetzt patchen! Noch 60.000 Exchange-Server für ProxyNotShell-Attacken anfällig

Sicherheitsforscher warnen vor verwundbaren Exchange-Servern. 30.000 davon sind in Europa – der Großteil in Deutschland. Sicherheitspatches sind verfügbar.

https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html?wt_mc=sm.red.ho.mastodon.mastodon.-.-

#MicrosoftExchange #Patches #ProxyNotShell #Security #Sicherheitslücken #Updates #News

#microsoftexchange #patches #proxynotshell #security #sicherheitslucken #updates

heise online @[email protected] · 2023-01-04 · 12:25 UTC

Jetzt patchen! Noch 60.000 Exchange-Server für ProxyNotShell-Attacken anfällig

Sicherheitsforscher warnen vor verwundbaren Exchange-Servern. 30.000 davon sind in Europa – der Großteil in Deutschland. Sicherheitspatches sind verfügbar.

https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html?wt_mc=sm.red.ho.mastodon.mastodon.-.-

#MicrosoftExchange #Patches #ProxyNotShell #Security #Sicherheitslücken #Updates #News

#microsoftexchange #patches #proxynotshell #security #sicherheitslucken #updates

heise online @[email protected] · 2023-01-04 · 12:25 UTC

Jetzt patchen! Noch 60.000 Exchange-Server für ProxyNotShell-Attacken anfällig

Sicherheitsforscher warnen vor verwundbaren Exchange-Servern. 30.000 davon sind in Europa – der Großteil in Deutschland. Sicherheitspatches sind verfügbar.

https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html?wt_mc=sm.red.ho.mastodon.mastodon.-.-

#MicrosoftExchange #Patches #ProxyNotShell #Security #Sicherheitslücken #Updates #News

#microsoftexchange #patches #proxynotshell #security #sicherheitslucken #updates

heise online @[email protected] · 2023-01-04 · 12:25 UTC

Jetzt patchen! Noch 60.000 Exchange-Server für ProxyNotShell-Attacken anfällig

Sicherheitsforscher warnen vor verwundbaren Exchange-Servern. 30.000 davon sind in Europa – der Großteil in Deutschland. Sicherheitspatches sind verfügbar.

https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html?wt_mc=sm.red.ho.mastodon.mastodon.-.-

#MicrosoftExchange #Patches #ProxyNotShell #Security #Sicherheitslücken #Updates #News

#news #updates #sicherheitslucken #security #proxynotshell #patches

heise online @[email protected] · 2023-01-04 · 12:25 UTC

Jetzt patchen! Noch 60.000 Exchange-Server für ProxyNotShell-Attacken anfällig

Sicherheitsforscher warnen vor verwundbaren Exchange-Servern. 30.000 davon sind in Europa – der Großteil in Deutschland. Sicherheitspatches sind verfügbar.

https://www.heise.de/news/Jetzt-patchen-Noch-60-000-Exchange-Server-fuer-ProxyNotShell-Attacken-anfaellig-7448029.html?wt_mc=sm.red.ho.mastodon.mastodon.-.-

#MicrosoftExchange #Patches #ProxyNotShell #Security #Sicherheitslücken #Updates #News

#microsoftexchange #patches #proxynotshell #security #sicherheitslucken #updates

Thomas Lee ✅ :patreon: @[email protected] · 2023-01-01 · 14:46 UTC

The latest A Daily Dose of PowerShell! https://paper.li/doctordns/1580827252?edition_id=a2cecef0-89e2-11ed-98b5-fa163eed9ef2 Thanks to @[email protected] #proxynotshell #powershell

#proxynotshell #powershell

Thomas Lee ✅ :patreon: @[email protected] · 2023-01-01 · 14:46 UTC

The latest A Daily Dose of PowerShell! https://paper.li/doctordns/1580827252?edition_id=a2cecef0-89e2-11ed-98b5-fa163eed9ef2 Thanks to @[email protected] #proxynotshell #powershell

#proxynotshell #powershell

Thomas Lee ✅ :patreon: @[email protected] · 2023-01-01 · 14:46 UTC

The latest A Daily Dose of PowerShell! https://paper.li/doctordns/1580827252?edition_id=a2cecef0-89e2-11ed-98b5-fa163eed9ef2 Thanks to @[email protected] #proxynotshell #powershell

#proxynotshell #powershell

Thomas Lee ✅ :patreon: @[email protected] · 2023-01-01 · 14:46 UTC

The latest A Daily Dose of PowerShell! https://paper.li/doctordns/1580827252?edition_id=a2cecef0-89e2-11ed-98b5-fa163eed9ef2 Thanks to @[email protected] #proxynotshell #powershell

#powershell #proxynotshell

Thomas Lee ✅ :patreon: @[email protected] · 2023-01-01 · 14:46 UTC

The latest A Daily Dose of PowerShell! https://paper.li/doctordns/1580827252?edition_id=a2cecef0-89e2-11ed-98b5-fa163eed9ef2 Thanks to @[email protected] #proxynotshell #powershell

#proxynotshell #powershell

Éric Freyssinet @[email protected] · 2022-12-26 · 18:28 UTC

@shadowserver
⬆️ ⬆️ Toujours des (milliers de) serveurs, y compris en France 🇫🇷 , qui n'ont pas été mis à jour contre les vulnérabilités #Exchange #ProxyNotShell #CVE_2022_41082

#cve_2022_41082 #exchange #proxynotshell

Éric Freyssinet @[email protected] · 2022-12-26 · 18:28 UTC

@shadowserver
⬆️ ⬆️ Toujours des (milliers de) serveurs, y compris en France 🇫🇷 , qui n'ont pas été mis à jour contre les vulnérabilités #Exchange #ProxyNotShell #CVE_2022_41082

#cve_2022_41082 #exchange #proxynotshell

Éric Freyssinet @[email protected] · 2022-12-26 · 18:28 UTC

@shadowserver
⬆️ ⬆️ Toujours des (milliers de) serveurs, y compris en France 🇫🇷 , qui n'ont pas été mis à jour contre les vulnérabilités #Exchange #ProxyNotShell #CVE_2022_41082

#cve_2022_41082 #exchange #proxynotshell

Éric Freyssinet @[email protected] · 2022-12-26 · 18:28 UTC

@shadowserver
⬆️ ⬆️ Toujours des (milliers de) serveurs, y compris en France 🇫🇷 , qui n'ont pas été mis à jour contre les vulnérabilités #Exchange #ProxyNotShell #CVE_2022_41082

#proxynotshell #exchange #cve_2022_41082

Éric Freyssinet @[email protected] · 2022-12-26 · 18:28 UTC

@shadowserver
⬆️ ⬆️ Toujours des (milliers de) serveurs, y compris en France 🇫🇷 , qui n'ont pas été mis à jour contre les vulnérabilités #Exchange #ProxyNotShell #CVE_2022_41082

#cve_2022_41082 #exchange #proxynotshell

raptor @[email protected] · 2022-12-26 · 08:30 UTC

A comprehensive article on #ProxyNotRelay (#ProxyNotShell + #ProxyRelay) by @buffaloverflow

ProxyNotRelay - An #Exchange #Vulnerability Encore
https://rw.md/2022/11/09/ProxyNotRelay.html

#proxynotrelay #proxynotshell #proxyrelay #exchange #vulnerability

raptor @[email protected] · 2022-12-26 · 08:30 UTC

A comprehensive article on #ProxyNotRelay (#ProxyNotShell + #ProxyRelay) by @buffaloverflow

ProxyNotRelay - An #Exchange #Vulnerability Encore
https://rw.md/2022/11/09/ProxyNotRelay.html

#proxynotrelay #proxynotshell #proxyrelay #exchange #vulnerability

raptor @[email protected] · 2022-12-26 · 08:30 UTC

A comprehensive article on #ProxyNotRelay (#ProxyNotShell + #ProxyRelay) by @buffaloverflow

ProxyNotRelay - An #Exchange #Vulnerability Encore
https://rw.md/2022/11/09/ProxyNotRelay.html

#proxynotrelay #proxynotshell #proxyrelay #exchange #vulnerability

raptor @[email protected] · 2022-12-26 · 08:30 UTC

A comprehensive article on #ProxyNotRelay (#ProxyNotShell + #ProxyRelay) by @buffaloverflow

ProxyNotRelay - An #Exchange #Vulnerability Encore
https://rw.md/2022/11/09/ProxyNotRelay.html

#vulnerability #exchange #proxyrelay #proxynotshell #proxynotrelay

raptor @[email protected] · 2022-12-26 · 08:30 UTC

A comprehensive article on #ProxyNotRelay (#ProxyNotShell + #ProxyRelay) by @buffaloverflow

ProxyNotRelay - An #Exchange #Vulnerability Encore
https://rw.md/2022/11/09/ProxyNotRelay.html

#proxynotrelay #proxynotshell #proxyrelay #exchange #vulnerability

Colin Cowie @[email protected] · 2022-12-23 · 16:14 UTC

New reporting on #ProxyNotShell by Palo Alto's Unit42!
🔗https://unit42.paloaltonetworks.com/threat-brief-owassrf/

Key points:

🗓️ Threat activity starting in late November
➡️ Download of renamed Putty
➡️ Anydesk execution from `C:\ProgramData\`
➡️ Account creation (`admon`)
➡️ Credential Dumping via Task Manager
🛡️ Detection/Hunting Op: `w3wp` process abuse

#ThreatIntel #CTI #DetectionEngineering

#proxynotshell #threatintel #cti #detectionengineering