Notes from the IR front lines — if you have on-prem Exchange, assume compromise. Also start a plan to migrate to Microsoft 365… yesterday.
22
72
8
435
Is this necessary if exchange is not accessible to the internet? No EWS or OWA? MDM for access to mobile email? Proof point or something like it as your email edge to the internet?
1
1
Replying to @MoarGood
Certainly eliminates Exchange as the initial breach, but it will be a juicy target after they get in with stolen VPN credentials

Apr 20, 2022 · 11:09 PM UTC

1
2
Replying to @hal_pomeranz
With exchange being so much more than just simple email services, it has never made sense to just stick it on the internet raw and naked no matter how much people like outlook web access.
3