Updated Guidance Microsoft Exchange Zero-Day

This advisory summarizes active exploitation of two Microsoft Exchange zero-days (CVE-2022-41040 SSRF and CVE-2022-41082 RCE) and provides mitigation steps: run Microsoft's EOMTv2 URL-rewrite mitigation (or apply the manual IIS URL Rewrite rule), install the IIS URL Rewrite module as recommended, and disable remote PowerShell for non-admins; it also notes observed scanning and potential bypass techniques and clarifies Exchange Online is not affected.