Plus member bonus – Exchange security issue

[Susan Bradley]

For those of you that are small businesses, I have uploaded to the Master Patch list page some special links, resources and a  Plus member only video
[See the full post at: Plus member bonus – Exchange security issue]

Susan Bradley Patch Lady

Reply | Quote

[anonymous]

With a problem as large as this you restrict this vital information to the Pro members area ONLY?

Reply | Quote

[Susan Bradley]

It relates to business mail users not home or consumer users.  Since it doesn’t apply to most of the membership, it’s a bonus to the Plus members that are business owners/consultants.

Susan Bradley Patch Lady

Reply | Quote

[JohnFDoe]

MAJOR Problem: The patch list apparently tells businesses to install the infected Exchange patches!

Those should be updated to be marked “DO NOT INSTALL, INFECTED!!”

Those kinds of patch rejections is why most of us pay for access to the patch lists (and also why we generally defer Microsoft updates for longer than officially recommended).

Also, the fact that someone was able to infiltrate the update system itself at Microsoft raises major questions as to the level of trust that should be placed in Microsoft updates.

Reply | Quote

[JohnFDoe]

Update: Some news media reported that it was the Exchange patches themselves that had been compromised, not that the exchange servers were getting attacked with 0-days.

Reply | Quote

[Susan Bradley]

No, what they were referring to was that during the patch testing process they share “indicators of compromise” and information with antivirus vendors and other patch testers. It’s possible that one of THEM had been hacked and thus the information got leaked out because someone hacked their inbox/credentials.

Susan Bradley Patch Lady

Reply | Quote

[Paul T]

Where have you seen evidence that the patches were infected?
Speculation isn’t enough for such an important issue.

cheers, Paul

Reply | Quote

[Susan Bradley]

Yea, patches were not infected.

Susan Bradley Patch Lady

Reply | Quote

[Susan Bradley]

With my deepest respect but these Exchange updates were not infected.  No Microsoft updates systems were infiltrated.  I would recommend that you review this article:  https://www.wsj.com/articles/microsoft-probing-whether-leak-played-role-in-suspected-chinese-hack-11615575793?mod=djemalertNEWS

Susan Bradley Patch Lady

Reply | Quote

[Susan Bradley]

https://us-cert.cisa.gov/ncas/current-activity/2021/03/13/updates-microsoft-exchange-server-vulnerabilities

More resources there

Susan Bradley Patch Lady

Reply | Quote

[Author]

Posts