Skip to content

Microsoft Exchange Hackathon

A signage of Microsoft is seen on March 13, 2020 in New York City.
A signage of Microsoft is seen on March 13, 2020 in New York City. Photo: Jeenah Moon (Getty Images)

As dramatic and massive a fuckup as SolarWinds was, what came next was possibly even more widespread: the discovery in March of a smattering of security flaws in Microsoft Exchange—a widely used email product—the likes of which set off a global epidemic of cyberattacks. At the time, Bloomberg reported that the vulnerabilities in Exchange had possibly led to “at least 60,000 known victims globally,” around 30,000 of which were inside the U.S. Many of the attacks were blamed on a group dubbed “HAFNIUM,” potentially located in China. However, the vulnerabilities set in motion what was basically a rat-king of hacker activity—with close to a dozen different cybercrime groups reportedly pillaging vulnerable servers and implanting backdoors.