Tweet by @ericgeller | PolitiTweet

Eric Geller @ericgeller

New CISA emergency directive requires agencies to search for evidence that they were hacked through the Microsoft Exchange Server vulnerabilities disclosed yesterday. If they find evidence, they must disconnect affected servers. If not, they have to patch. https://t.co/EzLikliEAl — PolitiTweet.org

Breaking: Microsoft has fixed zero-day vulnerabilities in its Exchange Server email software that Chinese governmen… https://t.co/O0lSNr5fVf

Posted March 3, 2021 Hibernated

Preceded By

Eric Geller @ericgeller

So what should be done? Gazlay wants to see the government work with major vendors like Microsoft to make secure configurations (e.g. looking for suspicious behavior in the right places) the default, so orgs don’t have to do it themselves. — PolitiTweet.org

Posted March 3, 2021 Hibernated

Followed By

Eric Geller @ericgeller

Agencies that lack the expertise to hunt for indicators of compromise must also disconnect potentially affected servers, even if they don't see evidence that they were hacked. — PolitiTweet.org

Posted March 3, 2021 Hibernated