Saturday, January 23, 2021
  • Setup menu at Appearance » Menus and assign menu to Top Bar Navigation
Advertisement
  • AI Development
    • Artificial Intelligence
    • Machine Learning
    • Neural Networks
    • Learn to Code
  • Data
    • Blockchain
    • Big Data
    • Data Science
  • IT Security
    • Internet Privacy
    • Internet Security
  • Marketing
    • Digital Marketing
    • Marketing Technology
  • Technology Companies
  • Crypto News
No Result
View All Result
NikolaNews
  • AI Development
    • Artificial Intelligence
    • Machine Learning
    • Neural Networks
    • Learn to Code
  • Data
    • Blockchain
    • Big Data
    • Data Science
  • IT Security
    • Internet Privacy
    • Internet Security
  • Marketing
    • Digital Marketing
    • Marketing Technology
  • Technology Companies
  • Crypto News
No Result
View All Result
NikolaNews
No Result
View All Result
Home Internet Privacy

Hackers Steal Mimecast Certificate Used to Securely Connect with Microsoft 365

January 13, 2021
in Internet Privacy
Hackers Steal Mimecast Certificate Used to Securely Connect with Microsoft 365
585
SHARES
3.3k
VIEWS
Share on FacebookShare on Twitter

Mimecast said on Tuesday that “a sophisticated threat actor” had compromised a digital certificate it provided to certain customers to securely connect its products to Microsoft 365 (M365) Exchange.

The discovery was made after the breach was notified by Microsoft, the London-based company said in an alert posted on its website, adding it’s reached out to the impacted organizations to remediate the issue.

You might also like

Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account

Missing Link in a ‘Zero Trust’ Security Model—The Device You’re Connecting With!

Importance of Application Security and Customer Data Protection to a Startup

The company didn’t elaborate on what type of certificate was compromised, but Mimecast offers seven different digital certificates based on the geographical location that must be uploaded to M365 to create a server Connection in Mimecast.

“Approximately 10 percent of our customers use this connection,” the company said. “Of those that do, there are indications that a low single digit number of our customers’ M365 tenants were targeted.”

Mimecast is a cloud-based email management service for Microsoft Exchange and Microsoft Office 365, offers users email security and continuity platform to safeguard them from spam, malware, phishing, and targeted attacks.

The compromised certificate is used to verify and authenticate Mimecast Sync and Recover, Continuity Monitor, and Internal Email Protect (IEP) products to M365 Exchange Web Services.

A consequence of such a breach could result in a man-in-the-middle (MitM) attack, where an adversary could potentially take over the connection and intercept email traffic, and even steal sensitive information.

As a precaution to prevent future abuse, the company said it’s asked its customers to delete the existing connection within their M365 tenant with immediate effect and re-establish a new certificate-based connection using the new certificate that it has made available.

“Taking this action does not impact inbound or outbound mail flow or associated security scanning,” Mimecast stated in its advisory.

An investigation into the incident is ongoing, with the company noting that it will work closely with Microsoft and law enforcement as appropriate.

The development comes as Reuters, citing sources, said the hackers who compromised Mimecast were the same group that breached U.S. software maker SolarWinds and a host of sensitive U.S. government agencies.

We have reached out to Mimecast for more information, and we’ll update the story if we hear back.


Credit: The Hacker News By: noreply@blogger.com (Ravie Lakshmanan)

Previous Post

Global Machine Learning Market Industry Share, Trends, Growth, Future Prospects, Forecast 2020 to 2026 – The Sentinel Newspaper

Next Post

Google reveals sophisticated Windows and Android hacking operation

Related Posts

Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account
Internet Privacy

Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account

January 23, 2021
Missing Link in a ‘Zero Trust’ Security Model—The Device You’re Connecting With!
Internet Privacy

Missing Link in a ‘Zero Trust’ Security Model—The Device You’re Connecting With!

January 22, 2021
Importance of Application Security and Customer Data Protection to a Startup
Internet Privacy

Importance of Application Security and Customer Data Protection to a Startup

January 22, 2021
Hackers Accidentally Expose Passwords Stolen From Businesses On the Internet
Internet Privacy

Hackers Accidentally Expose Passwords Stolen From Businesses On the Internet

January 22, 2021
MrbMiner Crypto-Mining Malware Links to Iranian Software Company
Internet Privacy

MrbMiner Crypto-Mining Malware Links to Iranian Software Company

January 22, 2021
Next Post
Google reveals sophisticated Windows and Android hacking operation

Google reveals sophisticated Windows and Android hacking operation

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recommended

Plasticity in Deep Learning: Dynamic Adaptations for AI Self-Driving Cars

Plasticity in Deep Learning: Dynamic Adaptations for AI Self-Driving Cars

January 6, 2019
Microsoft, Google Use Artificial Intelligence to Fight Hackers

Microsoft, Google Use Artificial Intelligence to Fight Hackers

January 6, 2019

Categories

  • Artificial Intelligence
  • Big Data
  • Blockchain
  • Crypto News
  • Data Science
  • Digital Marketing
  • Internet Privacy
  • Internet Security
  • Learn to Code
  • Machine Learning
  • Marketing Technology
  • Neural Networks
  • Technology Companies

Don't miss it

Cisco warns on critical security vulnerabilities in SD-WAN software, so update now
Internet Security

Cisco warns on critical security vulnerabilities in SD-WAN software, so update now

January 23, 2021
Global Machine Learning as a Service Market (2020-2026) | Latest COVID19 Impact Analysis | Know About Brand Players: Amazon, Oracle, IBM, Microsoftn, Google, etc.
Machine Learning

Machine Learning Courses Market 2020: Potential growth, attractive valuation make it is a long-term investment | Know the COVID19 Impact | Top Players: EdX, Ivy Professional School, NobleProg, Udacity, Edvancer, etc.

January 23, 2021
New website launched to document vulnerabilities in malware strains
Internet Security

New website launched to document vulnerabilities in malware strains

January 23, 2021
Splunk : Get to Know Splunk Machine Learning Environment (SMLE)
Machine Learning

Splunk : Get to Know Splunk Machine Learning Environment (SMLE)

January 23, 2021
License Plate Recognition (All you need to know) (ANPR) Part1 | by Sameer Bairwa
Neural Networks

License Plate Recognition (All you need to know) (ANPR) Part1 | by Sameer Bairwa

January 23, 2021
FSB warns of US cyberattacks after Biden administration comments
Internet Security

FSB warns of US cyberattacks after Biden administration comments

January 23, 2021
NikolaNews

NikolaNews.com is an online News Portal which aims to share news about blockchain, AI, Big Data, and Data Privacy and more!

What’s New Here?

  • Cisco warns on critical security vulnerabilities in SD-WAN software, so update now January 23, 2021
  • Machine Learning Courses Market 2020: Potential growth, attractive valuation make it is a long-term investment | Know the COVID19 Impact | Top Players: EdX, Ivy Professional School, NobleProg, Udacity, Edvancer, etc. January 23, 2021
  • New website launched to document vulnerabilities in malware strains January 23, 2021
  • Splunk : Get to Know Splunk Machine Learning Environment (SMLE) January 23, 2021

Subscribe to get more!

© 2019 NikolaNews.com - Global Tech Updates

No Result
View All Result
  • AI Development
    • Artificial Intelligence
    • Machine Learning
    • Neural Networks
    • Learn to Code
  • Data
    • Blockchain
    • Big Data
    • Data Science
  • IT Security
    • Internet Privacy
    • Internet Security
  • Marketing
    • Digital Marketing
    • Marketing Technology
  • Technology Companies
  • Crypto News

© 2019 NikolaNews.com - Global Tech Updates