North American APT Uses Exchange Zero-Day to Attack China

[[correlate]]

Content source

https://www.darkreading.com/cyberattacks-data-breaches/north-american-apt-exchange-zero-day-attacks-china

A Western advanced persistent threat (APT) has been exploiting an unknown zero-day in Microsoft Exchange to steal high-value intelligence from China's military and major technology industries.

North American APT Uses Exchange Zero-Day to Attack China

 

[Wrecker4923]

Reflecting on the position of Microsoft in this story, Bambenek (Bambenek Consulting ) assesses, "It's unlikely that Silicon Valley would undermine its own products, or intentionally overlook a vulnerability, in support of the US for the simple reason that every use of a zero-day increases the possibility that it is discovered, reverse engineered, and then used by other entities."

I always wonder about this kind of assessment. Historically, US tech companies will do many things if enough federal contract dollars are involved. The assessment also only soothes your own population; the opposite side's isn't going to believe it.