ProxyLogon is Just the Tip of the Iceberg, A New Attack Surface on Microsoft Exchange Server!

No ratings

Presented at DEF CON 29 by

Orange Tsai

Microsoft Exchange Server is an email solution widely deployed within government and enterprises, and it is an integral part of both their daily operations and security. Needless to say, vulnerabilities in Exchange have long been the Holy Grail for attackers, hence our security research on Exchange. Surprisingly, we’ve found not only critical vulnerabilities such as ProxyLogon, but a whole new attack surface of Exchange.