Featured
Recent
Video
Category
- Cloud & Application Security
  
  Cloud & Application Security
  
  CrowdStrike Empowers DevSecOps Teams to Strengthen and Streamline Cloud Security
  
  10/02/24
  
  Innovations in Falcon Cloud Security at Fal.Con 2024
  
  09/18/24
  
  Demystifying Data Protection in the Cloud: Runtime vs. At Rest
  
  09/09/24
  
  5 Crucial Steps to Protect Your Resources in Google Cloud
  
  08/29/24
- Counter Adversary Operations
  
  Counter Adversary Operations
  
  International Authorities Indict, Sanction Additional INDRIK SPIDER Members and Detail Ties to BITWISE SPIDER and Russian State Activity
  
  10/01/24
  
  How CrowdStrike Hunts, Identifies and Defeats Cloud-Focused Threats
  
  09/26/24
  
  Malicious Inauthentic Falcon Crash Reporter Installer Delivers LLVM-Based Mythic C2 Agent Named Ciro
  
  07/30/24
  
  Malicious Inauthentic Falcon Crash Reporter Installer Distributed to German Entity via Spearphishing Website
  
  07/25/24
- Endpoint Security & XDR
  
  Endpoint Security & XDR
  
  Small Business, Big Defense: Four Pillars of an Effective Cybersecurity Awareness Program
  
  10/14/24
  
  TDK Electronics Goes from Complexity to Confidence with CrowdStrike
  
  10/07/24
  
  CrowdStrike Named a Leader in 2024 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
  
  09/25/24
  
  CrowdStrike Unveils AI Innovations to Expedite Security Operations and Upgrade the Analyst Experience
  
  09/18/24
- Engineering & Tech
  
  Engineering & Tech
  
  Tech Analysis: Channel File May Contain Null Bytes
  
  07/24/24
  
  EMBERSim: A Large-Scale Databank for Boosting Similarity Search in Malware Analysis
  
  06/06/24
  
  CrowdStrike Falcon Next-Gen SIEM Unveils Advanced Detection of Ransomware Targeting VMware ESXi Environments
  
  04/15/24
  
  CrowdStrike’s Advanced Memory Scanning Stops Threat Actor Using BRc4 at Telecommunications Customer
  
  09/27/23
- Executive Viewpoint
  
  Executive Viewpoint
  
  Fal.Con Europe: Bringing the Power of the Crowd to Amsterdam
  
  10/14/24
  
  Recognizing the Resilience of the CrowdStrike Community
  
  09/25/24
  
  CrowdStrike Drives Cybersecurity Forward with New Innovations Spanning AI, Cloud, Next-Gen SIEM and Identity Protection
  
  09/18/24
  
  Tech Analysis: CrowdStrike's Kernel Access and Security Architecture
  
  08/09/24
- From The Front Lines
  
  From The Front Lines
  
  CrowdStrike Named a Leader with “Bold Vision” in 2024 Forrester Wave for Cybersecurity Incident Response Services
  
  06/10/24
  
  How to Defend Employees and Data as Social Engineering Evolves
  
  03/22/24
  
  The Anatomy of an ALPHA SPIDER Ransomware Attack
  
  02/29/24
  
  CrowdStrike Services Offers Incident Response Executive Preparation Checklist
  
  10/23/23
- Identity Protection
  
  Identity Protection
  
  CrowdStrike Announces Falcon Identity Protection Innovations for Entra ID and Privileged Access
  
  09/17/24
  
  Elevating Identity Security at Fal.Con 2024
  
  09/11/24
  
  CrowdStrike Brings Industry-Leading ITDR to All Major Cloud-Based Identity Providers
  
  05/28/24
  
  CrowdStrike Named Overall Leader in Industry’s First ITDR Comparative Report
  
  04/30/24
- Next-Gen SIEM & Log Management
  
  Next-Gen SIEM & Log Management
  
  CrowdStrike Named a Major Player in IDC MarketScape: Worldwide SIEM for Enterprise 2024
  
  10/03/24
  
  CrowdStrike Next-Gen SIEM Innovations Slash Response Time and Simplify SIEM Migrations
  
  09/17/24
  
  Step into the AI-Native SOC: Discover Next-Gen SIEM at Fal.Con 2024
  
  09/06/24
  
  Stop Phishing Attacks with Next-Gen SIEM and SOAR
  
  07/24/24
- Public Sector
  
  Public Sector
  
  Achieving Ecosystem-level Cybersecurity: A U.S. Policy Perspective
  
  06/11/24
  
  CrowdStrike Launches SEC Readiness Services to Prepare Boardrooms for New Regulations
  
  03/14/24
  
  After Years of Success, State of Wyoming Looks to Expand CrowdStrike Protections Statewide
  
  02/28/24
  
  Data Protection Day 2024: As Technology and Threats Evolve, Data Protection Is Paramount
  
  01/31/24
- Exposure Management
  
  Exposure Management
  
  October 2024 Patch Tuesday: Two Zero-Days and Three Critical Vulnerabilities Amid 118 CVEs
  
  10/08/24
  
  CrowdStrike Named a Leader in the 2024 Forrester Wave™: Attack Surface Management Solutions
  
  10/03/24
  
  September 2024 Patch Tuesday: Four Zero-Days and Seven Critical Vulnerabilities Amid 79 CVEs
  
  09/09/24
  
  August 2024 Patch Tuesday: Six Zero-Days and Six Critical Vulnerabilities Amid 85 CVEs
  
  08/14/24
Start Free Trial

Featured
Recent
Video
Category
Start Free Trial

Brian Pitchford - Erik Iker - Nicolas Zilio

OWASSRF: CrowdStrike Identifies New Exploit Method for Exchange Bypassing ProxyNotShell Mitigations

December 20, 2022

Brian Pitchford - Erik Iker - Nicolas Zilio From The Front Lines

CrowdStrike recently discovered a new exploit method (called OWASSRF) consisting of CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution (RCE) through Outlook Web Access (OWA). The new e[…]