Microsoft Exchange vulnerability actively exploited

Microsoft Exchange vulnerability CVE-2024-21410 (CVSS 9.8) is being actively exploited to leak NTLM credentials from clients (e.g., Outlook), which can be relayed against Exchange servers to gain privileges and perform actions on behalf of victims; Microsoft and the German BSI have issued warnings and Microsoft recommends installing the latest cumulative updates and enabling Extended Protection for Authentication to mitigate the issue.