Hackers target Microsoft servers
 

Bug has been exploited

Software king of the world Microsoft has warned its customers about a severe security issue with Exchange Server, its email and calendar software.

The tech giant said hackers were exploiting a bug in the system, known as CVE-2024-21410 before it was fixed in the latest batch of updates.

The hackers could use the flaw to take over the Exchange Server from anywhere without needing a password. They could then use this access to trick other devices on the network into logging in with their server, allowing them to impersonate those devices and get more power.

Vole said the hackers could use this trick to steal passwords from an NTLM client like Outlook. These stolen passwords could then be used to get even more control over the Exchange server.

https://fudzilla.com/news/58463-hack...rosoft-servers