Microsoft updates flaws in Exchange Server utilized by Chinese attackers
(Windows Phone Central)

All Exchange Server customers should apply the latest security updates. What you need to know Microsoft released security updates that fix vulnerabilities in Exchange Server software. The vulnerabilities were utilized in an attack by a state-sponsored attacker based in China. Microsoft `strongly [encourages] all Exchange Server customers to apply these updates immediately.` Microsoft recently rolled out security updates to fix four vulnerabilities in Exchange Server software (via Engadget). The vulnerabilities were utilized in cyberattacks orchestrated by a group Microsoft calls Hafnium. As explained by a Microsoft blog post, Hafnium operates out of China and is `a highly skilled and sophisticated actor.` Microsoft refers to Hafnium as a state-sponsored threat actor that operates out of China, but that primarily conducts its operations from leased virtual private services in the United States. According to Microsoft, the primary targets of Hafnium include infectious disease re...