Tradecraft Tuesday Episode 19 Exploiting
CVEs and On-Prem Exchange Servers
Check out the slides from this month's Tradecraft Tuesday as we unpack the recent news, explore how hackers exploited recent CVEs while using some pretty overt tradecraft, and have a candid discussion on how the attack was much larger than Microsoft suggested.
We also dive into more details on:
- How these exploits slipped past most preventive security products
- How the vulnerabilities could be leveraged to gain remote code execution
- How living-off-the-land techniques were used for post-exploitation and further attacks