microsoft safety scanner exchange vulnerability

The NCSC has assessed the number of vulnerable servers in the UK to be between 7,000 and 8,000, with approximately half of these already patched. Microsoft Safety Scanner can assist in detecting these. It is important to note that installing Microsoft’s patches will only stop future compromises, not any that have already taken place, so it is also vital to scan systems and networks for any signs of intrusion, specifically webshells deployed through the exploit chain.

Any incidents affecting UK organisations should be reported to the NCSC,” he said. Organisations should also be alive to the threat of ransomware and familiarise themselves with our guidance. “While this work is ongoing, the most important action is to install the latest Microsoft updates. “We are working closely with industry and international partners to understand the scale and impact of UK exposure, but it is vital that all organisations take immediate steps to protect their networks,” said NCSC operations director Paul Chichester.

In light of the growing number of advanced persistent threat (APT) groups and other malicious actors taking advantage of the vulnerabilities, including a limited number of cyber criminal ransomware operators, the NCSC has published fresh guidance to help vulnerable organisations reduce the risk of ransomware and other malware infections.

Microsoft safety scanner exchange vulnerability