Jayanth's Security Learnings and Observations

Topic

CVE

A collection of 2 issues

Is your team 'log ready'?

In the aftermath of a breach disclosed by Microsoft earlier this month, the cybersecurity industry has cast an uneasy spotlight on audit and event logging within Microsoft's Azure and M365.

Y22K? : Microsoft Exchange malware scanning can’t interpret 2022 dates; Emails undelivered

Reports are pouring in to Twitter of email traffic being frozen for many. Microsoft's Exchange server formats dates as YYMMDDHHMM, and then stores that number as a signed 32 bit Integer. Since YY here changed from '21 to '22 overnight (Happy New Year, by the way!