25,000-plus firms download tool to protect firms from Microsoft email server hack

A tool designed to assist companies protect themselves from additional compromises after a worldwide hack of Microsoft email server software program has been downloaded greater than 25,000 occasions because it was launched final week, the White House’s National Security Council stated Monday.

As a consequence, the variety of susceptible methods has fallen by 45%, in accordance to an NSC spokesperson.

The one-click Microsoft tool was created to protect in opposition to cyberattacks and to scan methods for compromises and repair them. It was developed after a large hack affecting an estimated tens of 1000’s of customers of servers working Microsoft’s Exchange email program.

Ransomware threat increases risks from recent Microsoft hack, warns Cary tech firm CEO

The breach was found in early January and was attributed to Chinese cyber spies concentrating on U.S. coverage suppose tanks. Then in late February, 5 days earlier than Microsoft Corp. issued a patch on March 2, there was an explosion of infiltrations by different intruders, piggybacking on the preliminary breach.

The White House earlier this month described the hack as an “energetic menace” that was being addressed by senior nationwide safety officers. The administration’s response is being led by deputy nationwide safety adviser Anne Neuberger, who convened authorities officers and personal sector specialists to brainstorm options, notably provided that smaller companies usually lack assets to counter cyber assaults and to clear up after hacks.

Since the discharge of the tool, the variety of susceptible methods has fallen to fewer than 10,000 from not less than 120,000 on the peak.

While Microsoft has taken appreciable warmth for being the supplier of software program that elite hackers have exploited, Charles Carmakal, senior vp and chief technical officer of distinguished cybersecurity agency FireEye, stated Microsoft, primarily based in Redmond, Washington, deserves credit score for working onerous to assist individuals who run its software program defend themselves.

He cited, particularly, the downloadable turnkey script that individuals can use to apply patches and see if their methods have been compromised.

“The degree of effort that they put into this to assist firms defend themselves is terrific,” he stated. “It’s a troublesome state of affairs that organizations are in with the vulnerability usually.”