Emerging Threats: Microsoft Exchange On-Prem Zero-Days

**Executive summary:** Microsoft confirmed two on-premises Exchange zero-day vulnerabilities (CVE-2022-41040 — SSRF, and CVE-2022-41082 — RCE) being used together in active attacks; no patch was available at the time and both issues require authenticated access. The report recommends immediate mitigations (block exposed Remote PowerShell, review and restrict OWA exposure, verify hybrid deployment asset inventories), monitoring for IOCs including web shells, and continuous behavioral detection to reduce risk.