Iranian state-sponsored actors are exploiting Fortinet and Microsoft Exchange ProxyShell vulnerabilities, U.K., U.S. agencies warn. The agencies did not attribute the activities to a specific advanced persistent threat (APT) actor. Targeted victims include Australian organizations and a wide range of entities across multiple critical infrastructure sectors, such as transportation and healthcare. As mitigations, the agencies are recommending organizations to immediately patch software affected by the vulnerabilities, enforce data backup and restoration procedures, and patch operating systems, software, and firmware as and when updates are released.”]
Source: https://thehackernews.com/2021/11/us-uk-and-australia-warn-of-iranian.html