🚨New #MicrosoftExchange #vulnerabilities were disclosed, including CVE-2022-41040 and CVE-2022-41082. Threat actors can easily exploit the new vulnerabilities, and bypass #ProxyNotShell URL rewrite mitigations, resulting in many companies facing further #ransomware #attacks.
An example of what such an exploit can do is shown in the picture below, where the #threat actor #FIN7 developed tailored systems to quickly discover and infiltrate the high-value targets by performing mass scans using #Microsoft #exchange #vulnerabilities. 
Our PTI team has already observed activities involving recent vulnerabilities in the wild. Therefore, #PRODAFT recommends that companies fix the vulnerabilities as soon as possible to avoid serious consequences.
Speaking of which, tomorrow we are about to finally release an extensive report on #FIN7 - with never-seen-before information about the threat actor. It’s riveting. We cannot wait. But… more on that tomorrow. Stay tuned 😉
#NewRelease #Cybercrime #Report #Cybercriminals
#NewRelease #Cybercrime #Report #Cybercriminals
• • •
Missing some Tweet in this thread? You can try to
force a refresh
