IT guy here. That's pretty fucking bad. Like.... really bad. Especially if it was combined with the solarwinds stuff a bit back. Exchange is emails, and internal email servers. They can basically get into all of the emails with admin level permissions with this exploit and likely already have at a bunch of places. If sysadmins are getting this fixed or contained right now, then they have a problem.
What does this effect? Mostly people/companies that run their own email servers internally. This can essentially open them up like Hillary's closet server.
The hack is when a hacker finds out about flaws in software before the manufacturer does and writes an attack taking advantage of that flaw. When the attack happens, there is no warning (zero days).
IT guy here. That's pretty fucking bad. Like.... really bad. Especially if it was combined with the solarwinds stuff a bit back. Exchange is emails, and internal email servers. They can basically get into all of the emails with admin level permissions with this exploit and likely already have at a bunch of places. If sysadmins are getting this fixed or contained right now, then they have a problem.
What does this effect? Mostly people/companies that run their own email servers internally. This can essentially open them up like Hillary's closet server.
Here's a good definition of zero day exploits:
https://www.fireeye.com/current-threats/what-is-a-zero-day-exploit.html
The hack is when a hacker finds out about flaws in software before the manufacturer does and writes an attack taking advantage of that flaw. When the attack happens, there is no warning (zero days).
Good catch!!