The Hafnium Exchange Exploits with Tony Redmond

07/04/2021 37 min Episodio 770
The Hafnium Exchange Exploits with Tony Redmond

Listen "The Hafnium Exchange Exploits with Tony Redmond"

Episode Synopsis

A severe set of exploits have hit the on-premises Exchange server world. Richard talks to Tony Redmond about the so-called Hafnium exploits, a collection of four zero-day exploits that can allow an attacker to run arbitrary code on Exchange servers visible to the internet. Exchange Online is not affected, and it appears that on-premises Exchange servers only accessible by VPN are also safe. The patches are available for Exchange 2010 on upward, but it is likely too late for tens of thousands of Exchange servers. What happens now?Links:Office 365 IT ProsJohn Hammond Hafnium AnalysisTony's Blog Post on HafniumMicrosoft Post on Hafnium Exploit