Microsoft Exchange Exploit Chain via "OWASSRF" Leads to RCE

Arctic Wolf advises organizations running Microsoft Exchange Server (on-premises or hybrid) to apply November security updates (KB5019758) to address CVE-2022-41080 and CVE-2022-41082—vulnerabilities that have been used in intrusions and are actively exploited—and provides additional mitigations such as disabling on-prem Exchange web services, restricting external access, and disabling remote PowerShell for non-admins.