Threat Source newsletter (March 4, 2021)
Summary: Microsoft disclosed Microsoft Exchange Server zero-day vulnerabilities earlier this week, and Microsoft said in a statement that a threat actor is exploiting them in the wild to steal users' emails. Cisco Talos also detailed a new ObliqueRAT campaign using updated macro code and adversary-controlled websites, and Cisco patched three critical vulnerabilities, the most severe rated 10 out of 10 on the CVSS scale, allowing an attacker to bypass authentication and receive a token with administrator-level privileges.
What you should know: A threat actor is already using the Exchange flaws in the wild to steal email, and one of Cisco's patched flaws carries a maximum 10-out-of-10 severity with a token that grants administrator-level API access to the targeted device.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026