---
title: Mass Exploiting CVEs and On-Prem Exchange Servers | eBook | Huntress
description: With the news of the Exchange Server zero-day flaws being exploited by hackers, this month has already seen its fair share of excitement.
---

[Close ](https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#)

[

SEARCH ](https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#)

[![Free Trial](https://no-cache.hubspot.com/cta/default/3911692/40e39240-8f28-4247-989e-af913fc5ff6d.png)](https://cta-redirect.hubspot.com/cta/redirect/3911692/40e39240-8f28-4247-989e-af913fc5ff6d)

[![Huntress - Head Text White_300px](https://huntress.co/hs-fs/hubfs/Huntress%20-%20Head%20Text%20White_300px.png?width=300&height=75&name=Huntress%20-%20Head%20Text%20White_300px.png)](https://www.huntress.com) [![Huntress-1](https://www.huntress.com/hubfs/Huntress-1.svg)](https://www.huntress.com)

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#>

[![Free Trial](https://no-cache.hubspot.com/cta/default/3911692/40e39240-8f28-4247-989e-af913fc5ff6d.png)](https://cta-redirect.hubspot.com/cta/redirect/3911692/40e39240-8f28-4247-989e-af913fc5ff6d)

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#> 

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#>

[Close ](https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#)

[

SEARCH ](https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#)

[ CONTACT ](https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#)

PHONE: [1-833-HUNT-NOW](tel:+18334868669) E-MAIL: [support@huntress.com](mailto:support@huntress.com)

[![Free Trial](https://no-cache.hubspot.com/cta/default/3911692/40e39240-8f28-4247-989e-af913fc5ff6d.png)](https://cta-redirect.hubspot.com/cta/redirect/3911692/40e39240-8f28-4247-989e-af913fc5ff6d)

[![Huntress-1](https://huntress.co/hubfs/Huntress-1.svg)](https://www.huntress.com) [![Huntress-1](https://huntress.co/hubfs/Huntress-1.svg)](https://www.huntress.com)

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#>

PHONE: [1-833-HUNT-NOW](tel:+18334868669) E-MAIL: [support@huntress.com](mailto:support@huntress.com)

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#>

[![Free Trial](https://no-cache.hubspot.com/cta/default/3911692/40e39240-8f28-4247-989e-af913fc5ff6d.png)](https://cta-redirect.hubspot.com/cta/redirect/3911692/40e39240-8f28-4247-989e-af913fc5ff6d)

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#> 

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#>

# eBook

- [ Home ](https://huntress.co)
- [ Cybersecurity Education ](https://huntress.co/cybersecurity-education-and-resources)
- [ Exploiting CVEs and On-Prem Exchange Servers ](https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides)

## Tradecraft Tuesday Episode 19 Exploiting CVEs and On-Prem Exchange Servers

![rev2-Exploiting-CVE-LP](https://www.huntress.com/hubfs/rev2-Exploiting-CVE-LP.png)

Check out the slides from this month's Tradecraft Tuesday as we unpack the recent news, explore how hackers exploited recent CVEs while using some pretty overt tradecraft, and have a candid discussion on how the attack was much larger than Microsoft suggested.

We also dive into more details on:

- How these exploits slipped past most preventive security products
- How the vulnerabilities could be leveraged to gain remote code execution
- How living-off-the-land techniques were used for post-exploitation and further attacks

### **Download eBook**

[![Huntress](https://huntress.co/hubfs/Huntress-1.svg)](https://www.huntress.com)

Deploy managed detection and response for endpoints and identities in minutes.

[LinkedIn ](https://www.linkedin.com/company/huntress-labs/) [Twitter ](https://twitter.com/huntresslabs) [Facebook ](https://www.facebook.com/huntresslabs) [YouTube ](https://www.youtube.com/c/Huntress/featured)

© 2026 Huntress - All rights reserved

<https://huntress.co/resources/ebook/tradecraft-tuesday-ep19-slides#>