SECURITYJun 9 · 20:20 UTCDARK READINGAlexander Culafi

Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address

A flaw in Microsoft Exchange, dubbed 'Ghost-Sender', allows attackers to spoof any email address by exploiting Exchange Online or on-premises systems in hybrid mode with third-party mail servers or spam filters.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

Microsoft ExchangetopicGhost-SendertopicExchange Onlinetopicthird-party mail servertopicspam filtertopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYJun 1 · 14:35 UTC
Patch Now: Another Palo Alto Auth Bypass Bug Under Active Exploit
SECURITYApr 27 · 23:11 UTC
Robinhood account creation flaw abused to send phishing emails
SECURITYMay 21 · 11:42 UTC
Scammers are abusing an internal Microsoft account to send spam links
SECURITYMay 15 · 11:51 UTC
Exploited Exchange Server flaw turns OWA inboxes into script launchpads
SECURITYMay 17 · 22:23 UTC
Fabricked: Misconfiguring Infinity Fabric to Break AMD SEV-SNP
SECURITYMay 11 · 19:49 UTC
Hackers Used AI to Build a Zero-Day Exploit That Bypasses Two-Factor Authentication: Google