Coverage Advisory For MS Exchange Server Vulnerabilities

This report describes active exploitation of two Microsoft Exchange zero-day vulnerabilities (CVE-2022-41040 and CVE-2022-41082, aka ProxyNotShell) that were chained by threat actors to deploy a Chopper web shell, conduct Active Directory reconnaissance and exfiltrate data; Microsoft and CISA issued guidance and hotfixes, and Zscaler published mitigations and protections.