Maintenance in progress

researchers reported active exploitation of a maximum-severity microsoft exchange server flaw by a group tracked as ta488 and attributed to the kremlin, used to backdoor unpatched servers and steal credentials. in the same window the uk department for education was extorted over stolen data, brinks home confirmed a breach claimed by shinyhunters, and attackers impersonated it staff in microsoft teams calls to deploy chaos ransomware across north america. the common entry point in most of these is a person or a mail server, not an exotic exploit.

security trade press and threat-intel reporting