Critical Microsoft Exchange Flaw Exploited by Russian Hackers for Persistent Server Access

A maximum-severity vulnerability in Microsoft Exchange Server is actively being exploited by Kremlin-linked threat actors to gain persistent access to compromised servers. The exploit can maintain access even after victims rotate credentials or reimage disks, making it particularly dangerous for enterprise security.

Why it matters: Exchange Server breaches pose catastrophic risks to organizations' email infrastructure and data security, and this persistent-access capability means standard remediation steps may fail to fully eliminate compromised actors.