RECENT ZERO-DAY COULD IMPACT UP TO 97,000 MICROSOFT EXCHANGE SERVERS

Summary from the TLDR InfoSec newsletter

Over 28,000 internet-facing Microsoft Exchange servers are vulnerable to a recent zero-day that enables pass-the-hash attacks. 68,000 additional servers are possibly vulnerable, totaling up to 97,000 possibly exploitable instances. The 9.8 CVSS privilege escalation flaw stems from Exchange 2019 lacking default NTLM relay protections.