cryptographic keys

ZeroDay: Remote execution and control of MS Exchange Server

Microsoft Exchange Logo

Microsoft has released a zero-day patch for all versions of the Microsoft Exchange Server.  As explained in the linked article, by examining the encryption certificate keys, a hacker is able to execute malicious code on any Exchange server via a POST to the Exchange Server’s address. CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through ZeroDay: Remote execution and control of MS Exchange Server