How did Microsoft Exchange get hit by both a major Pwn2Own Berlin 2026 exploit and a separate actively exploited zero-day in the same week,Microsoft Exchange faced both a research exploit chain and an actively exploited zero‑day within the same week in May 2026.
AI 提示
Create a landscape editorial hero image for this Studio Global article: How did Microsoft Exchange get hit by both a major Pwn2Own Berlin 2026 exploit and a separate actively exploited zero-day in the same week,. Article summary: Microsoft Exchange was hit by two different events in the same week: a contest-disclosed Pwn2Own Berlin 2026 exploit chain against Exchange, and a separate real-world zero-day, CVE-2026-42897, that Microsoft said was alr. Topic tags: general, government, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "* Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own. During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 u" source context "Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own" Reference image 2: visual subject "# Micr
openai.com
2026 年 5 月對 Microsoft Exchange 管理員嚟講可謂「安全黑色星期」。短短大約 48 小時內，平台先後遇到兩件完全不同但同樣嚴重嘅事件：
一個喺 Pwn2Own Berlin 2026 黑客比賽中公開示範嘅漏洞鏈
另一個 已經被攻擊者實際利用嘅零日漏洞 CVE‑2026‑42897
兩者雖然互不相關，但共同反映一個事實：仍然自行部署（on‑premises）嘅 Exchange Server 一直係高價值攻擊目標。
Pwn2Own Berlin 2026：Exchange 被成功攻破
喺德國柏林舉行嘅 Pwn2Own Berlin 2026 黑客競賽中，研究員成功入侵多種企業級產品，其中一個焦點就係 Microsoft Exchange。
安全研究員 DEVCORE 團隊嘅 Orange Tsai 透過 串連三個未公開漏洞，成功取得 Exchange Server SYSTEM 權限嘅遠端程式執行（RCE），並因此贏得 200,000 美元獎金。
How did Microsoft Exchange get hit by both a major Pwn2Own Berlin 2026 exploit and a separate actively exploited zero-day in the same week,Microsoft Exchange faced both a research exploit chain and an actively exploited zero‑day within the same week in May 2026.
AI 提示
Create a landscape editorial hero image for this Studio Global article: How did Microsoft Exchange get hit by both a major Pwn2Own Berlin 2026 exploit and a separate actively exploited zero-day in the same week,. Article summary: Microsoft Exchange was hit by two different events in the same week: a contest-disclosed Pwn2Own Berlin 2026 exploit chain against Exchange, and a separate real-world zero-day, CVE-2026-42897, that Microsoft said was alr. Topic tags: general, government, general web, user generated. Reference image context from search candidates: Reference image 1: visual subject "* Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own. During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 u" source context "Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own" Reference image 2: visual subject "# Micr
openai.com
2026 年 5 月對 Microsoft Exchange 管理員嚟講可謂「安全黑色星期」。短短大約 48 小時內，平台先後遇到兩件完全不同但同樣嚴重嘅事件：
一個喺 Pwn2Own Berlin 2026 黑客比賽中公開示範嘅漏洞鏈
另一個 已經被攻擊者實際利用嘅零日漏洞 CVE‑2026‑42897
兩者雖然互不相關，但共同反映一個事實：仍然自行部署（on‑premises）嘅 Exchange Server 一直係高價值攻擊目標。
Pwn2Own Berlin 2026：Exchange 被成功攻破
喺德國柏林舉行嘅 Pwn2Own Berlin 2026 黑客競賽中，研究員成功入侵多種企業級產品，其中一個焦點就係 Microsoft Exchange。
安全研究員 DEVCORE 團隊嘅 Orange Tsai 透過 串連三個未公開漏洞，成功取得 Exchange Server SYSTEM 權限嘅遠端程式執行（RCE），並因此贏得 200,000 美元獎金。
