Ransomwarecritical

Rackspace Confirms Play Ransomware Gang Responsible for Recent Breach

The Hacker Newsby @TheHackersNewsJan 7, 2023 · 17:47 UTC (Jan 7, 2023)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41080 CVE-2022-41040 CVE-2022-41082

Tags: cve-2022-41080 cve-2022-41040 cve-2022-41082 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022
CVE-2022-41080	Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns	8.8	77%	KEVRansomware	Nov 9, 2022 KEV Jan 10, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 06, 2023 Cloud Security / Cyber Threat Cloud services provider Rackspace on Thursday confirmed that the ransomware gang known as Play was responsible for last month's breach. The security incident, which took place on December 2, 2022, leveraged a previously unknown security exploit to gain initial access to the Rackspace Hosted Exchange email environment.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.