Skip to content
Threat Feed
Subscribe

Tag

Cve-2021-26857

1 brief RSS
medium threat

Microsoft Exchange Server UM Spawning Suspicious Processes

This rule detects suspicious processes spawned by the Microsoft Exchange Server Unified Messaging (UM) service, potentially indicating exploitation of CVE-2021-26857 and leading to unauthorized process execution and system compromise.

exploited Exchange Server exchange initial-access lateral-movement cve-2021-26857 windows
2r 2t 1c