GitHub Slammed by Researchers for Yanking PoC on Exchange ProxyLogon Vulnerabilities

Threat actor exploiting ProxyLogon to install DearCry ransomware, Intezer discovers RedXOR backdoor connected to China's Winnti group, Molson Coors disrupted by a ransomware attack, more

Mar 12, 2021

∙ Paid

We are so excited and grateful for our recent spate of new premium subscribers. Join their ranks today and don’t miss a thing in the fast-paced world of information security news.

Security researchers criticized Microsoft-owned code repository GitHub after it yanked a proof-of-concept exploit for Microsoft Exchange's critical vulnerabilities.

A Vietnamese researcher posted on GitHub and Medium what’s believed to be the first largely working proof-of-concept (PoC) exploit for the four critical vulnerabilities known as ProxyLogon. Microsoft removed the PoC, sparking an outcry among security professionals who say the software giant is censoring the content of vital value to the security community due to its own self-interest. (Dan Goodin / Ars Technica)

Keep reading with a 7-day free trial

Subscribe to Metacurity to keep reading this post and get 7 days of free access to the full post archives.