A global attack on the popular Microsoft Exchange email server system has become a global crisis.

This hack became public knowledge on March 2, 2021, with Microsoft releasing multiple software patches to address vulnerabilities that hackers were exploiting.   Microsoft and other groups are referring to the originating hacking group as “Hafnium.”

Here’s a comprehensive article from Bloomberg: Hackers Breach Microsoft Customers Becomes Global Cybersecurity Crisis – Bloomberg

On March 5th, Microsoft released tools to help investigate if your server has been affected by this breach.

Turn Key Solutions is URGENTLY recommending everyone to do 3 things if you run a Microsoft Exchange Server:

  1. Pull up your Cyber Security Incident Response plan
  2. If your organization runs an in-house Microsoft Exchange Server, apply the patches right now.     Here’s the article for them – Multiple Security Updates Released for Exchange Server – updated March 5, 2021 – Microsoft Security Response CenterOf note, our technical team has found a few issues where the patches can need a bit of extra attention to apply correctly and not hang the exchange server up for hours.
  3. Run the investigation tools and scripts to search for indicators that your system was compromised.   See Microsoft’s guidance here – HAFNIUM targeting Exchange Servers with 0-day exploits – Microsoft Security

If you need help with any of the above, call us today – we’re under the hood working with many other organizations right now, and we’d be glad to help you.

Related Posts - TKS Blog

TKS Newsletter - 2025 February
Here's our February 2025 Newsletter Read the full PDF version here: The TKS Sentinel - February Issue In this month's edition, we discuss: Work-Specific Tools Windows 11...
Read more
common password mistakes
Password Management Tips For Businesses
Is Your Business Cyber Secure? Passwords are the front line of defense against cyberattacks. Yet, most businesses still struggle with password security—whether it’s employees using weak...
Read more
password managers for business
How Password Managers Strengthen Your Cybersecurity Posture
The Growing Threat of Password Vulnerabilities Protecting your sensitive business information has never been more critical than it is today. Passwords remain one of the weakest...
Read more
password protection in the era of AI
Password Security In The Age Of AI
The AI Threat to Password Security Artificial intelligence is revolutionizing many industries, but it’s also empowering cyber criminals. Recent studies reveal that AI can crack over...
Read more