NNT Solutions - Texas

New Vulnerabilities with On-Premise Exchange Servers

A new series of vulnerabilities have been identified by Microsoft and other information security entities, and are associated with on-premise versions of Microsoft Exchange servers version 2013 and later. It’s important to note that unlike the Exchange vulnerabilities discovered last month, which were already being exploited by the Hafnium group, these vulnerabilities do not yet appear to have been exploited in the wild.

If you are a client with on-premise Exchange servers and you have contracted with us to manage patching, then we will be contacting you shortly to schedule deployment of these patches during an appropriate period. If you have any questions or concerns, please contact your service delivery manager.

If you are not contracted for managed patching, but you do have on-premise exchange servers, we recommend you identify a maintenance window in the coming days and apply the new round of April patches. It’s only a matter of time before attackers begin trying to exploit these systems.

As more information is developed we will adapt our detection and response tools to notify us in cases when these exploits are detected.

Additional Resources:
Microsoft’s April 2021 Security Response Center Blog:
https://msrc-blog.microsoft.com/2021/04/13/april-2021-update-tuesday-packages-now-available/

Microsoft’s April 2021 Exchange Server Security Update Blog:
https://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617

Ask us how to update and migrate your On-Premise Exchange to a Hosted Exchange Solution

[email protected]

Released: April 2021 Exchange Server Security Updates Microsoft has released security updates for vulnerabilities found in: Exchange Server 2013 Exchange Server 2016 Exchange Server 2019 These updates are available for the following specific builds of Exchange Server: IMPORTANT: If manually installing security updates, you must install .msp from eleva....

Microsoft Apologizes ‘Deeply’ For Worldwide Azure, Teams Outage

Microsoft Apologizes ‘Deeply’ For Worldwide Azure, Teams Outage Microsoft on Tuesday apologized for a worldwide outage that impacted Azure cloud services including Microsoft Teams, Office 365 and Dynamics 365.