[Bastille]

New 0-day discovered on Exchange server 2013, 2016 and 2019.

The following article by Microsoft provides a mitigation for this, waiting for an update.

https://www.microsoft.com/security/blog/...022-41082/

[Bastille]

The mitigation proposed by Microsoft can be bypassed, here is an update for new mitigation measures :

https://www.darkreading.com/remote-workf...-zero-days