News

Exploits In Microsoft Exchange Used To Breach Over 30,000 Organizations

Published

6 years ago

March 8, 2021

exploit in microsoft exchange used to breach over 30000 organizations

Over 30,000 entities, including local governments, small businesses, defense contractors, and education institutions, have been breached because of unpatched exploits in Microsoft Exchange, reported journalist and investigative reporter Brian Krebs on his blog, KrebsOnSecurity.

“In each incident, the intruders have left behind a ‘web shell,’ an easy-to-use, password-protected hacking tool that can be accessed over the Internet from any browser. The web shell gives the attackers administrative access to the victim’s computer servers,” Krebs wrote.

According to Microsoft, the attack was orchestrated by notorious Chinese hacking group Hafnium, and they started on January 6^th, the day when rioters stormed the United States Capitol in a violent attack against the 117th United States Congress.

Microsoft released emergency security updates to patch the vulnerabilities on March 2^nd, which means that the attackers had nearly two months to infiltrate vulnerable systems. The tech giant has been working closely with the U.S. Cybersecurity & Infrastructure Security Agency (CISA), as well as other public and private organizations, to secure all unpatched servers running Exchange Server 2013, 2016, or 2019 (Exchange Online hasn’t been affected).

“The best protection is to apply updates as soon as possible across all impacted systems,” said Microsoft spokesperson in a written statement. “We continue to help customers by providing additional investigation and mitigation guidance. Impacted customers should contact our support teams for additional help and resources.”

Also Read: Dubai Police Use Futuristic Technology To Read Murder Suspect’s Mind

While most known victims of the attacks were located in the United States, breaches related to the Microsoft Exchange vulnerabilities were also detected on the other side of the Atlantic. For example, the Prague municipality and the Czech Ministry for Labor and Social Affairs were forced to shut down some of their systems and install emergency patches. No data was stolen during the attack, said Czech government officials.

Attacks like this one highlight the importance of timely patching and modern intrusion detection tools, which are able to detect unusual activity while it’s still time to act.

News

Visa’s Return To Syria Starts With A Test And A Bank In Lebanon

Foreign visitors will be the first users to benefit, but whether Syria’s own banks and cardholders follow is still an open question.

Published

2 weeks ago

August 27, 2026

Dana Saadeh

visa's return to syria starts with a test and a bank in lebanon

Visa is returning to Syria. Its first live international card transaction in the country was a test rather than a launch, and the milestone event ran through a Lebanese bank.

The acquirer (the bank on the merchant’s side of a card payment) was Fransabank Lebanon, with Paymera as the other named partner. Nadim Moujaes, who heads a Fransabank Group subsidiary, describes the test as both the culmination of “longstanding efforts to link Syria back to international payment networks” and “the first step in a larger path”.

Syrian President Ahmed Al-Sharaa makes the first electronic payment in Syria using a @Visa card at a store in Damascus, following the lifting of US sanctions on Syria. pic.twitter.com/lpAN7nQ6Fc

— Tech Magazine (@TechMGZN) August 27, 2026

“We are excited to have successfully tested live transactions today as we plan to enable international visitors to use their Visa cards while in Syria,” says Leila Serhan, Visa’s senior vice president and group country manager for the North Africa, Levant and Pakistan region. Although a significant first step, that plan doesn’t come with a hard date for when a visitor’s card will work normally.

Mohammed Safwat Raslan, governor of the Central Bank of Syria, says the test paves the way for international card acceptance in Syria and that maintaining strong compliance, risk management and operational controls will remain essential. Serhan likewise stresses that Visa has worked within applicable legal, regulatory and compliance requirements. For a test transaction, it seems there was a great deal of attention paid to the rules, with the entire operation being carefully managed.

Also Read: Lebanon’s 5G Era Begins With 150 Stations And A $1M Budget

The test is the latest step in a sequence that began in December 2025, when Visa announced a strategic roadmap to support Syria’s integration into the global digital economy. In February 2026 it hosted its first industry gathering of banks, ecosystem partners and policymakers in Damascus and, the same month, signed an agreement with Syria’s Ministry of Communications and Information Technology in San Francisco.

Michel Kattouah, Paymera’s CEO, called the test “the return of international card acceptance,” but while that’s positive news, there’s no word yet on when a Syrian bank will issue a Visa card to a Syrian customer.