A Basic Timeline of the Exchange Mass-Hack
Summary: Krebs on Security assembled a timeline of the Microsoft Exchange mass-hack in which hundreds of thousands of Exchange Server systems were compromised and seeded with a backdoor Trojan. Microsoft said it was first notified "in early January," with the earliest known report on Jan. 5 from DEVCORE's Orange Tsai, Volexity identifying attacks on Jan. 6 and informing Microsoft on Feb. 2, and Dubex reporting client hits from Jan. 18 to Microsoft on Jan. 27, before Microsoft patched four flaws on Mar. 2.
Bottom line: The vulnerabilities sat in Exchange Server code for more than ten years, and Microsoft had almost two months between the January reports and the Mar. 2 patch while attackers exploited the flaws indiscriminately against hundreds of thousands of systems.
Read the original at Krebs on Security ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026