Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users. [...]
Microsoft patches Exchange Server zero-day exploited in attacks
Résumé + lien vers la source. Sans paywall, sans tracking.