Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.

News > Attacks & Threats > Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address

Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address

“Ghost-Sender" is the result of a widespread misconfiguration, according to researchers, and evidence indicates it's being actively abused in the wild.

A weakness in certain configurations of Microsoft Exchange enables attackers to send an email from any user to a vulnerable organization.

That's according to Swiss cybersecurity firm InfoGuard, which published research today concerning a new vulnerability it described as "Ghost-Sender." Specifically, organizations that use Exchange Online or on-premises in hybrid mode with a third-party mail server or spam filter as its mail exchange (MX) record are vulnerable to this level of spoofing. MX Records are a type of DNS record that directs email messages to the specific server responsible for an organization's domain. More here

Similar Stories

An untold number of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer. More...

The latest version of the Android malware has new features that expand its global reach and put more than users' financi… More...

The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions sho… More...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potentia… More...

A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, … More...

Have your say

 

News Categories

An untold number of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer. More...

The latest version of the Android malware has new features that expand its global reach and put more than users' financi… More...

The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions sho… More...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potentia… More...

A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, … More...

image

Contact Us

Security Interest Group Switzerland
c/o Bridge Head AG
Sulzbergstrasse 34
5430 Wettingen
Switzerland

Follow Us

This website is powered by
ToucanTech