An energy sector company in Azerbaijan has been targeted by multiple cyber intrusions. The attacks exploited known vulnerabilities in Microsoft Exchange, allowing attackers to access critical systems repeatedly. Although the full extent of the damage was not detailed, the incident underscores the need to apply patches in a timely manner.
Recurring Exchange flaws and the urgency of patching in time 🔐
The continued exploitation of these Microsoft Exchange flaws highlights a worrying pattern: vulnerabilities, already disclosed and with patches available, remain an effective attack vector. Attackers accessed critical systems of the energy company, suggesting that defenses were not updated quickly enough. To mitigate these risks, it is essential to prioritize patch management and segment networks.
Patches: that concept some companies still don't know 🧵
It seems that in the Azerbaijani energy company, they confuse a security patch with a patch for a shirt. If attackers entered through the same door over and over again, perhaps they should consider changing the lock. Or at least read Microsoft's advisories, which are not as long as the electricity bill. 💡