Uncategorized

Blocking Exchange CVE-2022-41040 Attacks via HAProxy

If you’re using Microsoft Exchange on-premise and you want to protect your setup against the recent CVE-2022-41040 and CVE-2022-41082 zero-day vulnerabilities, you can follow Microsoft’s instructions to set up a rewrite rule in IIS. If your Exchange setup is behind HAProxy, you can also block the requests at the proxy level. This is especially useful …

Blocking Exchange CVE-2022-41040 Attacks via HAProxy Read More »

Welcome!

Welcome to my new blog! I’m going to use this blog as a collection of notes I consider interesting. The first blog post after this one has been migrated from my old, non-maintained blog hosted on Blogger.com.