Rackspace incident may involve known vulnerabilities, Security Week reports

Rackspace’s (RXT) Hosted Exchange service, which makes it easier for organizations to use Microsoft Exchange servers for email, started experiencing problems on Friday, December 2, with the company confirming the problems early in the day and telling customers that it had to shut down the Exchange environment due to what it described as "significant failure," Security Week’s Eduard Kovacs writes. Security researcher Kevin Beaumont believes the incident may involve exploitation of known vulnerabilities affecting Microsoft Exchange, specifically CVE-2022-41040 and CVE-2022-41082, which are known as ProxyNotShell, the publication notes. ProxyNotShell came to light in late September after a Vietnamese cybersecurity company saw it being exploited in attacks. Microsoft (MSFT) confirmed exploitation and linked the attacks to a nation-state hacker group, Kovacs adds. Reference Link