Almost four months after Microsoft patched a serious vulnerability in Microsoft Exchange servers, more than 350,000 Internet-connected servers continue to be vulnerable to the privilege escalation flaw, according to a report published on Wednesday. While Microsoft patched the issue (CVE-2020-0688) in February, more than 80% of Internet-connected Microsoft Exchange servers remain vulnerable, requiring attackers to find or phish only a single valid credential to completely compromise a company’s email system, threat-protection firm Rapid7 stated in its “2020:

Read full article on Dark Reading