Cyber risk and advisory programs that identify security gaps and build strategies to address them.
MDR that provides improved detection, 24/7 threat hunting, end-to-end coverage and most of all, complete Response.
Our team delivers the fastest response time in the industry. Threat suppression within just 4 hours of being engaged.
Be protected by the best from Day 1.
24/7 Threat Investigation and Response.
Expert hunting, research and content.
Defend brute force attacks, active intrusions and unauthorized scans.
Protect assets from ransomware, trojans, rootkits and more.
Intelligence and visibility across AWS, O365, DevOps and more.
Configuration escalations, policy and posture management.
Detects malicious insider behavior leveraging Machine Learning models.
In response to the ongoing exploitation of recently disclosed Microsoft Exchange server zero-day vulnerabilities, Microsoft has released new mitigations for organizations that are currently unable to apply the required security patches. Importantly, Microsoft has also released the Microsoft Support Emergency Response Tool (MSERT). The MSERT tool can be used to detect and remediate known threats abusing these vulnerabilities.
Organizations are strongly recommended to ensure that security patches or mitigations are deployed to prevent exploitation. The MSERT tool should be used to help identify potentially malicious actions that may have occurred prior to patch or mitigation deployment.
What we’re doing about it
What you should do about it
Confirmed vulnerable on-premises Microsoft Exchange Servers:
Microsoft has provided mitigations to defend against attacks exploiting all of the previously stated vulnerabilities. It should be noted that applying the mitigation actions will result in functionality degradation in Exchange servers. The functionality impact of each mitigation action is outline in detail in the official release. Microsoft has released a free Nmap script to scan for CVE-2021-26855.