Microsoft’s big email hack: What happened, who did it, and why it matters_老虎社区_美港股上老虎

Microsoft’s big email hack: What happened, who did it, and why it matters

cnbc2021-03-10

KEY POINTS On March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...

网页链接

免责声明：本文观点仅代表作者个人观点，不构成本平台的投资建议，本平台不对文章信息准确性、完整性和及时性做出任何保证，亦不对因使用或信赖文章信息引发的任何损失承担责任。

JoeK
·2021-03-10
Concern if u r running IT
回复
1
举报
LowZackM
·2021-03-10
Sell
回复
3
举报
收起
- LowZackM:
  Sell
  2021-03-10
  回复
  举报
Never ever f
·2021-03-10
[惊吓] [惊吓]
回复
2
举报
KSHoSG
·2021-03-10
This raises great concern for cyber security.
回复
3
举报
JaydenSee
·2021-03-10
Ooops
回复
点赞
举报
nakazatous
·2021-03-10
Like my comment
回复
2
举报
冲冲高
·2021-03-10
Oops
回复
1
举报
linereps
·2021-03-10
Hmmmm
回复
点赞
举报
1Man2Stonks
·2021-03-10
We need BB security
回复
3
举报
收起
- rDj:
  👍
  2021-03-10
  回复
  举报
- linereps:
  👍
  2021-03-10
  回复
  举报
wenns
·2021-03-10
[呆住]
回复
1
举报
收起
- Kelzz:
  [微笑]
  2021-03-10
  回复
  举报
Vitasoy
·2021-03-10
Like and comment pls
回复
4
举报
收起
- rDj:
  Liked
  2021-03-10
  回复
  举报
- AzuNyaa:
  comment back pls
  2021-03-10
  回复
  举报
rDj
·2021-03-10
Comment and like pls
回复
6
举报
收起
- julianttw:
  Like pls
  2021-03-10
  回复
  举报
- 1Man2Stonks:
  mine too thanks
  2021-03-10
  回复
  举报
- SeeHong:
  help to comment and like my comment as well
  2021-03-10
  回复
  举报
查看更多 1 条评论
TriciaChang
·2021-03-10
Waaaa shocking
回复
1
举报
xinda
·2021-03-10
Thats not good
回复
3
举报
TeenPopZ
·2021-03-10
Hi
回复
2
举报
收起
- TeenPopZ:
  Ok
  2021-03-10
  回复
  举报
User99999
·2021-03-10
Like and respond!
回复
4
举报
收起
- rDj:
  Liked
  2021-03-10
  回复
  举报
- AzuNyaa:
  comments back pls
  2021-03-10
  回复
  举报
yhbtil
·2021-03-10
That's not good
回复
2
举报
收起
- User99999:
  Damn
  2021-03-10
  回复
  举报
cphoebe
·2021-03-10
Hmm
回复
2
举报
Runic
·2021-03-10
Noice
回复
点赞
举报
收起
- AzuNyaa:
  comment back pls :) noice
  2021-03-10
  回复
  举报
Sebas997
·2021-03-10
like pls for good karma:)
回复
2
举报
收起
- cphoebe:
  Ok
  2021-03-10
  回复
  举报

热议股票

7x24

全部

关于我们·老虎社区守则·老虎社区账号管理规范·老虎社区服务协议·老虎社区隐私政策

公司名称：北京至简风宜信息技术有限公司

违法和不良信息投诉：010-5681-3562（工作时间9:30-18:30）

邮箱：service@laohu8.com

营业执照：91110105MA01A4U55R

ICP备：京ICP备18016422号

网安备：京公网安备11010502036490

关注我们

{"i18n":{"language":"zh_CN"},"data":{"share":"https://www.laohu8.com/m/news/1167989655?lang=zh_CN&edition=full","thumbnail":"","is_english":true,"pubTime":"2021-03-10 08:22","share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","id":"1167989655","market":"us","top_or_hot":-1,"title":"Microsoft’s big email hack: What happened, who did it, and why it matters","media":"cnbc","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">网页链接</a>\n\n</div>\n","source":"cnbc_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">网页链接</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","article_id":"1167989655","we_media_id":null,"thumbnails":[],"rights":{"source":"cnbc_highlight","url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","rn_cache_url":null,"customStyle":"body{padding-top:10px;}.ArticleHeader-headline{#titleStyle#}a{#lv2TextColor#}.ArticleHeader-time, .Author-authorNameAndSocial a{#sourceStyle#;}","selectors":".PageBuilder-pageWrapper","filters":".ArticleHeader-eyebrow, .RelatedTags-relatedTags","directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","pubTimestamp":1615335734,"sourceInfo":{"source_id":"cnbc_highlight","name":"CNBC"},"weMediaInfo":null,"summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","collect":0,"end_time":0,"defaultTopTitle":"cnbc.com","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"微软的大电子邮件黑客：发生了什么，是谁干的，为什么重要","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"MSFT":0.9},"content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":323215090,"gmtCreate":1615344376910,"gmtModify":1703487650486,"author":{"id":"3575261937306050","authorId":"3575261937306050","name":"JoeK","avatar":"https://static.tigerbbs.com/162445e8b6a553bd412b8a06e3f44c9e","vip":1,"crmLevel":6,"crmLevelSwitch":0,"authorIdStr":"3575261937306050","idStr":"3575261937306050"},"htmlText":"Concern if u r running IT","listText":"Concern if u r running IT","text":"Concern if u r running IT","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323215090","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323239902,"gmtCreate":1615343025706,"gmtModify":1703487627694,"author":{"id":"3573568310387546","authorId":"3573568310387546","name":"LowZackM","avatar":"https://static.tigerbbs.com/768e9ec80d5d9568297fe487c4b4c95a","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3573568310387546","idStr":"3573568310387546"},"htmlText":"Sell","listText":"Sell","text":"Sell","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/323239902","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756988,"gmtCreate":1615343073750,"gmtModify":1635756578381,"authorId":3573568310387546,"author":{"id":3573568310387546,"idStr":"3573568310387546","authorId":3573568310387546,"name":"LowZackM","avatar":"https://static.tigerbbs.com/768e9ec80d5d9568297fe487c4b4c95a","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323239902,"type":1,"supId":0,"prevId":0,"content":"Sell","text":"Sell","html":"Sell"}],"langContent":"EN"},{"id":323298135,"gmtCreate":1615342545227,"gmtModify":1703487617133,"author":{"id":"3555043402922696","authorId":"3555043402922696","name":"Never ever f","avatar":"https://static.tigerbbs.com/52501d43721648c944a019db9c767c5d","vip":1,"crmLevel":4,"crmLevelSwitch":0,"authorIdStr":"3555043402922696","idStr":"3555043402922696"},"htmlText":"[惊吓]&nbsp;[惊吓]&nbsp;","listText":"[惊吓]&nbsp;[惊吓]&nbsp;","text":"[惊吓] [惊吓]","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323298135","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"CN"},{"id":323202104,"gmtCreate":1615341959408,"gmtModify":1703487605552,"author":{"id":"3575616552570301","authorId":"3575616552570301","name":"KSHoSG","avatar":"https://static.tigerbbs.com/f9e9c60ddd65dd7dca218423e8951ee3","vip":1,"crmLevel":5,"crmLevelSwitch":0,"authorIdStr":"3575616552570301","idStr":"3575616552570301"},"htmlText":"This raises great concern for cyber security.","listText":"This raises great concern for cyber security.","text":"This raises great concern for cyber security.","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323202104","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323673724,"gmtCreate":1615340923668,"gmtModify":1703487586153,"author":{"id":"3571546243427161","authorId":"3571546243427161","name":"JaydenSee","avatar":"https://static.tigerbbs.com/f81b1d1b9ef76e9028b0f68e5a5d3553","vip":1,"crmLevel":3,"crmLevelSwitch":0,"authorIdStr":"3571546243427161","idStr":"3571546243427161"},"htmlText":"Ooops","listText":"Ooops","text":"Ooops","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323673724","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323642903,"gmtCreate":1615340509802,"gmtModify":1703487576306,"author":{"id":"3570519374633708","authorId":"3570519374633708","name":"nakazatous","avatar":"https://static.tigerbbs.com/9ac34656b654252df0f82999785e92ae","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3570519374633708","idStr":"3570519374633708"},"htmlText":"Like my comment","listText":"Like my comment","text":"Like my comment","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323642903","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323641508,"gmtCreate":1615340381704,"gmtModify":1703487572866,"author":{"id":"3577967326862109","authorId":"3577967326862109","name":"冲冲高","avatar":"https://static.tigerbbs.com/b1bdedaa222e1b8ec019d660176bc827","vip":1,"crmLevel":8,"crmLevelSwitch":0,"authorIdStr":"3577967326862109","idStr":"3577967326862109"},"htmlText":"Oops","listText":"Oops","text":"Oops","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323641508","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323649262,"gmtCreate":1615340246356,"gmtModify":1703487569414,"author":{"id":"3571046202315678","authorId":"3571046202315678","name":"linereps","avatar":"https://static.tigerbbs.com/3d348014f82002028e364ade841b3433","vip":1,"crmLevel":7,"crmLevelSwitch":0,"authorIdStr":"3571046202315678","idStr":"3571046202315678"},"htmlText":"Hmmmm","listText":"Hmmmm","text":"Hmmmm","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323649262","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323657475,"gmtCreate":1615340103897,"gmtModify":1703487566318,"author":{"id":"3576990637797737","authorId":"3576990637797737","name":"1Man2Stonks","avatar":"https://static.tigerbbs.com/2c93182b4ac6670e37860fa9cbdfd2d4","vip":1,"crmLevel":3,"crmLevelSwitch":0,"authorIdStr":"3576990637797737","idStr":"3576990637797737"},"htmlText":"We need BB security","listText":"We need BB security","text":"We need BB security","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":2,"repostSize":0,"link":"https://laohu8.com/post/323657475","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756598,"gmtCreate":1615340194980,"gmtModify":1635756599298,"authorId":3560659454957997,"author":{"id":3560659454957997,"idStr":"3560659454957997","authorId":3560659454957997,"name":"rDj","avatar":"https://static.tigerbbs.com/5d780bed87fa959fa825e01587af3b59","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323657475,"type":1,"supId":0,"prevId":0,"content":"👍","text":"👍","html":"👍"},{"id":3756600,"gmtCreate":1615340203034,"gmtModify":1635756599173,"authorId":3571046202315678,"author":{"id":3571046202315678,"idStr":"3571046202315678","authorId":3571046202315678,"name":"linereps","avatar":"https://static.tigerbbs.com/3d348014f82002028e364ade841b3433","vip":1,"crmLevel":7,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323657475,"type":1,"supId":0,"prevId":0,"content":"👍","text":"👍","html":"👍"}],"langContent":"EN"},{"id":323657614,"gmtCreate":1615340088338,"gmtModify":1703487566489,"author":{"id":"3573628867735517","authorId":"3573628867735517","name":"wenns","avatar":"https://static.tigerbbs.com/56a10a99293efcd3e1e25084a2bcecbf","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3573628867735517","idStr":"3573628867735517"},"htmlText":"[呆住]&nbsp;","listText":"[呆住]&nbsp;","text":"[呆住]","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/323657614","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756590,"gmtCreate":1615340152410,"gmtModify":1635756599921,"authorId":3569232528431910,"author":{"id":3569232528431910,"idStr":"3569232528431910","authorId":3569232528431910,"name":"Kelzz","avatar":"https://static.tigerbbs.com/ae9c1aa2f12f5072e158a0f61fabb3e4","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323657614,"type":1,"supId":0,"prevId":0,"content":"[微笑]","text":"[微笑]","html":"[微笑]"}],"langContent":"CN"},{"id":323657387,"gmtCreate":1615340076549,"gmtModify":1703487565630,"author":{"id":"3577504187038953","authorId":"3577504187038953","name":"Vitasoy","avatar":"https://static.tigerbbs.com/58e9bb8ba4854b81225a8fcfb6d31682","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3577504187038953","idStr":"3577504187038953"},"htmlText":"Like and comment pls","listText":"Like and comment pls","text":"Like and comment pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":2,"repostSize":0,"link":"https://laohu8.com/post/323657387","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756597,"gmtCreate":1615340179599,"gmtModify":1635756599423,"authorId":3560659454957997,"author":{"id":3560659454957997,"idStr":"3560659454957997","authorId":3560659454957997,"name":"rDj","avatar":"https://static.tigerbbs.com/5d780bed87fa959fa825e01587af3b59","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323657387,"type":1,"supId":0,"prevId":0,"content":"Liked","text":"Liked","html":"Liked"},{"id":3757137,"gmtCreate":1615344559867,"gmtModify":1635756569708,"authorId":3560894228634455,"author":{"id":3560894228634455,"idStr":"3560894228634455","authorId":3560894228634455,"name":"AzuNyaa","avatar":"https://static.tigerbbs.com/e65996a02c73a885a74a5e91062fa07e","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323657387,"type":1,"supId":0,"prevId":0,"content":"comment back <u>pls</u>","text":"comment back <u>pls</u>","html":"comment back <u>pls</u>"}],"langContent":"EN"},{"id":323654573,"gmtCreate":1615340044492,"gmtModify":1703487564941,"author":{"id":"3560659454957997","authorId":"3560659454957997","name":"rDj","avatar":"https://static.tigerbbs.com/5d780bed87fa959fa825e01587af3b59","vip":1,"crmLevel":4,"crmLevelSwitch":0,"authorIdStr":"3560659454957997","idStr":"3560659454957997"},"htmlText":"Comment and like pls","listText":"Comment and like pls","text":"Comment and like pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":6,"commentSize":4,"repostSize":0,"link":"https://laohu8.com/post/323654573","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756576,"gmtCreate":1615340072902,"gmtModify":1635756600804,"authorId":3569289975833539,"author":{"id":3569289975833539,"idStr":"3569289975833539","authorId":3569289975833539,"name":"julianttw","avatar":"https://static.tigerbbs.com/7f854886b4aff30c9c4529effeb79b64","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323654573,"type":1,"supId":0,"prevId":0,"content":"Like <u>pls</u>","text":"Like <u>pls</u>","html":"Like <u>pls</u>"},{"id":3756578,"gmtCreate":1615340081280,"gmtModify":1635756600677,"authorId":3576990637797737,"author":{"id":3576990637797737,"idStr":"3576990637797737","authorId":3576990637797737,"name":"1Man2Stonks","avatar":"https://static.tigerbbs.com/2c93182b4ac6670e37860fa9cbdfd2d4","vip":1,"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323654573,"type":1,"supId":0,"prevId":0,"content":"mine too <u>thanks</u>","text":"mine too <u>thanks</u>","html":"mine too <u>thanks</u>"},{"id":3756579,"gmtCreate":1615340082582,"gmtModify":1635756600550,"authorId":3572347422376891,"author":{"id":3572347422376891,"idStr":"3572347422376891","authorId":3572347422376891,"name":"SeeHong","avatar":"https://static.tigerbbs.com/6ba7451e0628a5a97b52d2ec3aa42caf","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323654573,"type":1,"supId":0,"prevId":0,"content":"help to comment and like my comment as <u>well</u>","text":"help to comment and like my comment as <u>well</u>","html":"help to comment and like my comment as <u>well</u>"},{"id":3756583,"gmtCreate":1615340105777,"gmtModify":1635756600298,"authorId":3572347422376891,"author":{"id":3572347422376891,"idStr":"3572347422376891","authorId":3572347422376891,"name":"SeeHong","avatar":"https://static.tigerbbs.com/6ba7451e0628a5a97b52d2ec3aa42caf","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323654573,"type":1,"supId":3756578,"prevId":0,"content":"give <u>you</u>","text":"give <u>you</u>","html":"give <u>you</u>"}],"langContent":"EN"},{"id":323654381,"gmtCreate":1615340025643,"gmtModify":1703487564596,"author":{"id":"3560421500323385","authorId":"3560421500323385","name":"TriciaChang","avatar":"https://static.tigerbbs.com/5cb6619edb253a8bb8b2776c7d9b0e02","vip":1,"crmLevel":6,"crmLevelSwitch":0,"authorIdStr":"3560421500323385","idStr":"3560421500323385"},"htmlText":"Waaaa shocking","listText":"Waaaa shocking","text":"Waaaa shocking","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323654381","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323656418,"gmtCreate":1615339850234,"gmtModify":1703487561665,"author":{"id":"3568766270669985","authorId":"3568766270669985","name":"xinda","avatar":"https://static.tigerbbs.com/2760aaaf4f8e82555fbca3c14fa7d8c7","vip":1,"crmLevel":4,"crmLevelSwitch":0,"authorIdStr":"3568766270669985","idStr":"3568766270669985"},"htmlText":"Thats not good","listText":"Thats not good","text":"Thats not good","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323656418","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323656590,"gmtCreate":1615339850110,"gmtModify":1703487561321,"author":{"id":"3566966810662099","authorId":"3566966810662099","name":"TeenPopZ","avatar":"https://static.tigerbbs.com/8c1bdc62c66e3417a063fc38a4171048","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3566966810662099","idStr":"3566966810662099"},"htmlText":"Hi","listText":"Hi","text":"Hi","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/323656590","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756553,"gmtCreate":1615339877310,"gmtModify":1635756602188,"authorId":3566966810662099,"author":{"id":3566966810662099,"idStr":"3566966810662099","authorId":3566966810662099,"name":"TeenPopZ","avatar":"https://static.tigerbbs.com/8c1bdc62c66e3417a063fc38a4171048","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323656590,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":323658457,"gmtCreate":1615339828279,"gmtModify":1703487560115,"author":{"id":"3577683360440602","authorId":"3577683360440602","name":"User99999","avatar":"https://static.tigerbbs.com/5acf9263c5e8a245daf2e4170c4cca5c","vip":1,"crmLevel":1,"crmLevelSwitch":0,"authorIdStr":"3577683360440602","idStr":"3577683360440602"},"htmlText":"Like and respond!","listText":"Like and respond!","text":"Like and respond!","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":2,"repostSize":0,"link":"https://laohu8.com/post/323658457","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756572,"gmtCreate":1615340059222,"gmtModify":1635756601181,"authorId":3560659454957997,"author":{"id":3560659454957997,"idStr":"3560659454957997","authorId":3560659454957997,"name":"rDj","avatar":"https://static.tigerbbs.com/5d780bed87fa959fa825e01587af3b59","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323658457,"type":1,"supId":0,"prevId":0,"content":"Liked","text":"Liked","html":"Liked"},{"id":3757138,"gmtCreate":1615344570835,"gmtModify":1635756569582,"authorId":3560894228634455,"author":{"id":3560894228634455,"idStr":"3560894228634455","authorId":3560894228634455,"name":"AzuNyaa","avatar":"https://static.tigerbbs.com/e65996a02c73a885a74a5e91062fa07e","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323658457,"type":1,"supId":3756572,"prevId":0,"content":"comments back <u>pls</u>","text":"comments back <u>pls</u>","html":"comments back <u>pls</u>"}],"langContent":"EN"},{"id":323651232,"gmtCreate":1615339733426,"gmtModify":1703487558034,"author":{"id":"3574894291679736","authorId":"3574894291679736","name":"yhbtil","avatar":"https://static.tigerbbs.com/164ab60aeab670f32033fc7cd35d4a52","vip":1,"crmLevel":3,"crmLevelSwitch":0,"authorIdStr":"3574894291679736","idStr":"3574894291679736"},"htmlText":"That's not good&nbsp;","listText":"That's not good&nbsp;","text":"That's not good","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/323651232","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756548,"gmtCreate":1615339839921,"gmtModify":1635756602440,"authorId":3577683360440602,"author":{"id":3577683360440602,"idStr":"3577683360440602","authorId":3577683360440602,"name":"User99999","avatar":"https://static.tigerbbs.com/5acf9263c5e8a245daf2e4170c4cca5c","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323651232,"type":1,"supId":0,"prevId":0,"content":"Damn","text":"Damn","html":"Damn"}],"langContent":"EN"},{"id":323651662,"gmtCreate":1615339732356,"gmtModify":1703487557691,"author":{"id":"3575160629791342","authorId":"3575160629791342","name":"cphoebe","avatar":"https://static.tigerbbs.com/a18a377d642ecf97986ffb08af0fd53e","vip":1,"crmLevel":4,"crmLevelSwitch":0,"authorIdStr":"3575160629791342","idStr":"3575160629791342"},"htmlText":"Hmm","listText":"Hmm","text":"Hmm","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/323651662","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":323653559,"gmtCreate":1615339663171,"gmtModify":1703487556833,"author":{"id":"3574929286065715","authorId":"3574929286065715","name":"Runic","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3574929286065715","idStr":"3574929286065715"},"htmlText":"Noice","listText":"Noice","text":"Noice","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/323653559","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3757143,"gmtCreate":1615344610095,"gmtModify":1635756569209,"authorId":3560894228634455,"author":{"id":3560894228634455,"idStr":"3560894228634455","authorId":3560894228634455,"name":"AzuNyaa","avatar":"https://static.tigerbbs.com/e65996a02c73a885a74a5e91062fa07e","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323653559,"type":1,"supId":0,"prevId":0,"content":"comment back pls :) noice","text":"comment back pls :) noice","html":"comment back pls :) noice"}],"langContent":"EN"},{"id":323659669,"gmtCreate":1615339573251,"gmtModify":1703487554770,"author":{"id":"3574939149444540","authorId":"3574939149444540","name":"Sebas997","avatar":"https://static.tigerbbs.com/3f8d93c1ba9f0a0ae56af713df14b69f","vip":1,"crmLevel":2,"crmLevelSwitch":0,"authorIdStr":"3574939149444540","idStr":"3574939149444540"},"htmlText":"like pls for good karma:)","listText":"like pls for good karma:)","text":"like pls for good karma:)","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/323659669","repostId":1167989655,"repostType":4,"repost":{"id":"1167989655","pubTimestamp":1615335734,"share":"https://www.laohu8.com/m/news/1167989655?lang=&edition=full","pubTime":"2021-03-10 08:22","market":"us","language":"en","title":"Microsoft’s big email hack: What happened, who did it, and why it matters","url":"https://stock-news.laohu8.com/highlight/detail?id=1167989655","media":"cnbc","summary":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and ca","content":"<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n","source":"cnbc_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Microsoft’s big email hack: What happened, who did it, and why it matters</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMicrosoft’s big email hack: What happened, who did it, and why it matters\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-03-10 08:22 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html><strong>cnbc</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and...</p>\n\n<a href=\"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"MSFT":"微软"},"source_url":"https://www.cnbc.com/2021/03/09/microsoft-exchange-hack-explained.html","is_english":true,"share_image_url":"https://static.laohu8.com/72bb72e1b84c09fca865c6dcb1bbcd16","article_id":"1167989655","content_text":"KEY POINTS\n\nOn March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least since January.\nThe group, which Microsoft has dubbed Hafnium, has aimed to gain information from defense contractors, schools and other entities in the U.S., according to a blog post by Microsoft VP Tom Burt.\nThe hack could lead companies to spend more on security software and adopting cloud-based email instead of running their own email servers in-house.\n\nOne week ago,Microsoftdisclosed that Chinese hackers were gaining access to organizations’ email accounts through vulnerabilities in its Exchange Server email software and issued security patches.\nThe hack will probably stand out as one of the top cybersecurity events of the year, because Exchange is still widely used around the world. It could lead companies to spend more on security software to prevent future hacks, and to move to cloud-based email instead of running their own email servers in-house.\nIT departments are working on applying the patches, but that takes time and the vulnerability is still widespread. On Monday, internet security company Netcraftsaidit had run an analysis over the weekend and observed over 99,000 servers online running unpatched Outlook Web Access software.\nShares of Microsoft stock have fallen 1.3% since March 1, the day before the company disclosed the issues, while the S&P 500 index is down 0.7% over the same period.\nHere’s what you need to know about the Microsoft cyberattacks:\nWhat happened?\nOn March 2, Microsoftsaidthere were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The company released patches for the 2010, 2013, 2016 and 2019 versions of Exchange.\nGenerally, Microsoft releases updates on Patch Tuesday, which occurs on the second Tuesday of each month, but the announcement about attacks on the Exchange software came on the first Tuesday, emphasizing its significance.\nMicrosoft also took the unusual step of issuing a patch for the 2010 edition, even though support for it ended in October. “That means the vulnerabilities the attackers exploited have been in the Microsoft Exchange Server code base for more than 10 years,” security blogger Brian Krebs wrote in a Mondayblog post.\nHackers had initially pursued specific targets, but in February they started going after more servers with the vulnerable software that they could spot, Krebs wrote.\nAre people exploiting the vulnerabilities?\nYes. Microsoftsaidthe main group exploiting vulnerabilities is a nation-state group based in China that it calls Hafnium.\nWhen did the attacks start?\nAttacks on the Exchange software started in early January, according to security companyVolexity, which Microsoft gave credit to for identifying some of the issues.\nHow does the attack work?\nTom Burt, a Microsoft corporate vice president, described in ablog postlast week how an attacker would go through multiple steps:\nFirst, it would gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access. Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access – run from the U.S.-based private servers – to steal data from an organization’s network.\nAmong other things, attackersinstalled and used softwareto take email data, Microsoft said.\nDo the flaws affect cloud services like Office 365?\nNo. The four vulnerabilities Microsoft disclosed do not affect Exchange Online, Microsoft’s cloud-based email and calendar service that’s included in commercial Office 365 and Microsoft 365 subscription bundles.\nWhat are the attackers targeting?\nThe group has aimed to gain information from defense contractors, schools and other entities in the U.S., Burt wrote. Victims include U.S. retailers, according to security companyFireEye, and the city of Lake Worth Beach, Fla., according to thePalm Beach Post. The European Banking Authoritysaidit had been hit.\nHow many victims are there altogether?\nMedia outlets have published varying estimates on the number of victims of the attacks. On Friday theWall Street Journal, citing an unnamed person, said there could be 250,000 or more.\nWill the patches banish any attackers from compromised systems?\nMicrosoftsaid no.\nDoes this have anything do with SolarWinds?\nNo, the attacks on Exchange Server do not seem to not related to the SolarWinds threat, to which former Secretary of State Mike Pompeo said Russia was probably connected. Still, the disclosure comes less than three months after U.S. government agencies and companies said they hadfound malicious contentin updates to Orion software from information-technology companySolarWindsin their networks.\nWhat’s Microsoft doing?\nMicrosoft is encouraging customers to install the security patches it delivered last week. It has alsoreleased informationto help customers figure out if their networks had been hit.\n“Because we are aware of active exploits of related vulnerabilities in the wild (limited targeted attacks), our recommendation is to install these updates immediately to protect against these attacks,” Microsoft said in ablog post.\nOn Monday the company made it easier for companies to treat their infrastructure byreleasingsecurity patches for versions of Exchange Server that did not have the most recent available software updates. Until that point, Microsoft had said customers would have to apply the most recent updates before installing the security patches, which delayed the process of dealing with the hack.\n“We are working closely with the CISA [the Cybersecurity and Infrastructure Security Agency], other government agencies, and security companies to ensure we are providing the best possible guidance and mitigation for our customers,” a Microsoft spokesperson told CNBC in an email on Monday. “The best protection is to apply updates as soon as possible across all impacted systems. We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”\nWhat are the implications?\nThe cyberattacks could end up being beneficial for Microsoft. Besides making Exchange Server, it sells security software that clients might be inclined to start using.\n“We believe this attack, like SolarWinds, will keep cybersecurity urgency high and likely bolster broad-based security spending in 2021, including with Microsoft, and speed the migration to cloud,” KeyBanc analysts led by Michael Turits, who have the equivalent of a buy rating on Microsoft stock, wrote in a note distributed to clients on Monday.\nBut many Microsoft customers have already switched to cloud-based email, and some companies rely on Google’s cloud-based Gmail, which is not affected by the Exchange Server flaws. As a result, the impact of the hacks could have been worse if they had come five or 10 years ago, and there won’t necessarily be a race to the cloud as a result of Hafnium.\n“I meet a lot of organizations, big and small, and it’s more the exception than the rule when somebody’s all on prem,” said Ryan Noon, CEO of e-mail security start-up Material Security.\nDA Davidson analysts Andrew Nowinski and Hannah Baade wrote in a Tuesday note that the attacks could increase adoption of products from security companies such asCyberark,ProofpointandTenable.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":3756528,"gmtCreate":1615339741876,"gmtModify":1635756603945,"authorId":3575160629791342,"author":{"id":3575160629791342,"idStr":"3575160629791342","authorId":3575160629791342,"name":"cphoebe","avatar":"https://static.tigerbbs.com/a18a377d642ecf97986ffb08af0fd53e","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":323659669,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":93,"commentSize":69,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}