Displaying items by tag: Amit Serper

A researcher at a security firm that disclosed an issue with a protocol in the Microsoft Exchange mail server software has defended not having made contact with the company before releasing his findings, saying the issue had been known for seven years.

A protocol used by Microsoft Exchange, the popular email server software used by both individuals and businesses, has been found to be leaking credentials of users, who attempt to authenticate from clients like Microsoft Outlook, due to a defect in its design.

A well-known researcher from security outfit Chronicle Security has questioned why tech and mainstream media have given blanket coverage to research by the US/Israeli firm Cybereason, which detailed intrusions into a number of telecommunications firms by a Chinese group known as APT10, when the research did not provide any indicators of compromise or accounts from victims.

Mail servers running the Exim mail transport agent are being exploited, with the attackers using a vulnerability disclosed a few days ago to run arbitrary commands as root, a security practitioner has warned.