Exchange 0-days fixed (at last) – plus 4 brand new Patch Tuesday 0-days!

In all the excitement, we kind of lost count ourselves. Were there six 0-days, or only four?
Want to know more about this topic or about us? Contact us!
In all the excitement, we kind of lost count ourselves. Were there six 0-days, or only four?
Microsoft calls it “Modern Auth”, though it’s a decade old, and is finally forcing Exchange Online customers to switch to it.
Latest episode – listen and learn now (or read and revise, if the written word is your thing)…
Who’s affected, what you can do while waiting for Microsoft’s patches, and how to plan your threat hunting…
Double-play 0-day in Exchange – what you need to know, and what you can do
Latest episode – listen now! Solid cybersecurity advice in plain English.
It was a zero-day bug until Patch Tuesday, now there’s an anyone-can-use-it exploit. Don’t be the one who hasn’t patched.
by Paul Ducklin The cybersecurity meganews of the week, of course, is anything to do with HAFNIUM. (To be clear, we’re going to write it as Hafnium from now on, as Microsoft does in its top-level incident disclosure document, so that it doesn’t look as though we’re shouting all the . . . Read more
The administrator of your personal data will be Threatpost, Inc., 500 Unicorn Park, Woburn, MA 01801. Detailed information on the processing of personal data can be found in the privacy policy. In addition, you will find them in the message confirming the subscription to the newsletter.
I often need to get statistics and check mailbox sizes and quotas and here are some useful notes and examples that I often cut’n’paste instead of re-inventing them: Get top list of big mailboxes, sorted by size: Get-Mailbox -ResultSize Unlimited | Get-MailboxStatistics | Sort-Object TotalItemSize -Descending | Select-Object DisplayName,StorageLimitStatus,TotalItemSize -First . . . Read more