Microsoft Exchange

Reported Context (8)

vulnerabilities by using scanning tools, cross-site scripting attacks, and password spraying on Microsoft Exchange servers, while establishing persistence through VPN software and exfiltrating emails and FBI Seizes Seven Domains Linked to Flax Typhoon Hacking Tools
vulnerabilities by using scanning tools, cross-site scripting attacks, and password spraying on Microsoft Exchange servers, while establishing persistence through VPN software and exfiltrating emails and DOJ and FBI Seize Flax Typhoon-Linked Tools Microscan and FishHub
Those vulnerabilities spanned 2016 through 2025 and affected Microsoft Exchange and SharePoint, Fortinet FortiOS, Cisco IOS XE, F5 BIG-IP, GeoServer, Apache Shiro, and other public-facing technologies. Recorded Future Reports 215 Actively Exploited CVEs and Expanding Supply-Chain Threats in H1 2026
Microsoft Exchange (SYSTEM RCE), SharePoint (pre-authentication RCE), and Edge (four-bug sandbox escape) all fell to well-understood vulnerability classes. Pwn2Own Berlin 2026 Uncovers 47 Zero-Days Across AI and Enterprise Products
Microsoft Exchange CloudSek Report Warns of Iranian-Linked Cyber Pre-Positioning Across Gulf Networks

CVE (17)

Malware (70)

People (11)

Threat Actors (53)

MITRE ATT&CK (44)

Vendors (49)

Products (115)

Tools (33)

Industries (27)

Countries (21)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.