WASHINGTON: Microsoft urgently updated its free Exchange server Indicators of Compromise tool and released emergency alternative mitigation measures overnight as the extent of damage globally from four recently disclosed zero-day vulnerabilities becomes clearer.
The IoC tool can be used to scan Exchange server log files to determine whether or not they are compromised. The emergency alternative mitigations, which are only partial and not considered the best fix, can be taken temporarily by organizations unable to immediately patch the four Exchange vulnerabilities that are being actively exploited in the wild. The severity of the vulnerabilities, as well as the widespread use of Exchange servers globally, prompted Microsoft to release out-of-band patches on Mar. 2.