#windows #patchmanagement #cybersecurity

Active zero day exploit in the wild hitting on prem exchange servers. M$ has patch out to mitigate the attack chain. Exchange servers accepting connections on 443 are vulnerable.

Exchange servers protected by edge servers or not allowing external connections still vulnerable.

Main threat is exfil of mailbox data. Exchange online not impacted.

https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2021-exchange-server-security-updates/ba-p/2175901