On February 11 2020, Microsoft released a patch for Exchange Servers that would fix a vulnerability pertaining to unauthorized access to the backend of the Exchange Control Panel. There is now confirmation from a source at the United States Department of Defense that multiple nation-state backed actors and other ransomware gangs are actively and maliciously exploiting this vulnerability on unpatched systems. The vulnerability results from the Exchange Server failing to properly create unique cryptographic keys at the time of installation. The hackers’ sophisticated exploits circumvent encryption, granting them full access of the server.
It is imperative that the latest patches from February 11th be applied as even a single Exchange instance puts you at risk.
Read More

A large number of businesses are increasingly embracing all that Microsoft Office 365 cloud technology has to offer and are getting there using a hybrid model. This model is based on - maintaining their on-premises Exchange infrastructure while slowly migrating mailboxes into the O365 cloud tenant. It’s a strategy that makes sense when organizations have large numbers of mailboxes or don’t have sufficient staff to support a “big bang” cutover approach.

