How Arctic Wolf Responds to Critical Vulnerabilities

**Executive summary:** Arctic Wolf describes the out-of-band Microsoft Exchange Server vulnerabilities (multiple CVEs) actively exploited by HAFNIUM to deploy web shells across thousands of servers, enabling credential theft, lateral movement, data exfiltration, and follow-on ransomware (DearCry); the report focuses on detection, remediation, and security operations guidance for identifying IOCs, removing web shells, and containing incidents.