US National Security Council urges review of Exchange Servers in wake of Hafnium attack The Biden administration has urged users of Microsoft's Exchange mail and messaging server to ensure they have not fallen victim to the recently-detected "Hafnium" attack on Exchange Server that Microsoft says originated in China. Microsoft revealed the attack last week and released Exchange security updates. The Biden …
You could always just follow the crowd and outsource your email to a cloud like office or gsuite.
Or just outsource the IT to one of the large outsource shops with hundreds of thousands of staff who work 24/7 365 and don’t complain about working weekends.
I suspect non of the above would fix the exploit bit management would be seen to be doing something by logging a call.
Can you not make assumptions about other people's situations? You think I don't value myself and my time? How offensive.
I wasn't told I had to do it on the weekend by anyone, it could have waited until a work day. I chose to do it, for the users, as I said. Sometimes people do things for other peoplr because they want to.
"Biden's done sweet FA apart from restarting the bombing of brown people."
The bombing of brown people did not stop under trump but in fact may have increased:
www.middleeasteye.net/news/trump-afghanistan-middle-east-strikes-civilian-deaths
while at the same time, accountability decreased:
foreignpolicy.com/2020/05/22/obama-drones-trump-killings-count/
"reports are suggesting the Biden administration will create a task force to address the Hafnium attack and its aftermath."
I'm sure they will. And in 8 to 14 months we'll get a 470 page report that maybe 17 people will read. The basic problem -- which is that we don't seem to know how to build software that connects to public networks, does anything useful, and isn't vulnerable to attacks -- will not be solved.
I think we do, it's just that Microsoft's approach is too monolithic and complex. Unfortunately "nobody got fired for buying Microsoft products" trickles right down to companies with a handful of employees and they install Exchange Server to handle their email. They struggle to configure it and leave it at the stage where it limps along, keeping their fingers crossed nothing goes awry.
The following comment probably has these people in mind:-
"Microsoft, meanwhile, has issued additional mitigation advice for those unable to patch Exchange Server."
There is no mention in that mitigation of throwing in the towel and migrating to some kind of hosted solution, which in-house IT people now have the perfect excuse to recommend to their superiors.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
