Latest Microsoft Exchange news

Microsoft releases Exchange hotfixes for security update issues

Microsoft has released hotfix updates to address multiple known issues impacting Exchange servers after installing the March 2024 security updates.
- Sergiu Gatlan
- April 23, 2024
- 03:50 PM
- 0
Germany warns of 17K vulnerable Microsoft Exchange servers exposed online

The German national cybersecurity authority warned on Tuesday that it found at least 17,000 Microsoft Exchange servers in Germany exposed online and vulnerable to one or more critical security vulnerabilities.
- Sergiu Gatlan
- March 26, 2024
- 03:21 PM
- 4
Over 28,500 Exchange servers vulnerable to actively exploited bug

Up to 97,000 Microsoft Exchange servers may be vulnerable to a critical severity privilege escalation flaw tracked as CVE-2024-21410 that hackers are actively exploiting.
- Bill Toulas
- February 19, 2024
- 01:46 PM
- 0
Microsoft: New critical Exchange bug exploited as zero-day

Microsoft warned today in an updated security advisory that a critical vulnerability in Exchange Server was exploited as a zero-day before being fixed during this month's Patch Tuesday.
- Sergiu Gatlan
- February 14, 2024
- 06:29 PM
- 1
Microsoft Exchange update enables Extended Protection by default

Microsoft is automatically enabling Windows Extended Protection on Exchange servers after installing this month's 2024 H1 Cumulative Update (aka CU14).
- Sergiu Gatlan
- February 14, 2024
- 12:34 PM
- 0
Microsoft Exchange 2019 has reached end of mainstream support

Microsoft announced the end of mainstream support for its Exchange Server 2019 on-premises mail server software on January 9, 2023.
- Sergiu Gatlan
- January 10, 2024
- 11:43 AM
- 0
Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks

Tens of thousands of Microsoft Exchange email servers in Europe, the U.S., and Asia exposed on the public internet are vulnerable to remote code execution flaws.
- Ionut Ilascu
- December 02, 2023
- 01:54 PM
- 0
Microsoft Exchange gets ‘better’ patch to mitigate critical bug

The Exchange Team asked admins to deploy a new and "better" patch for a critical Microsoft Exchange Server vulnerability initially addressed in August.
- Sergiu Gatlan
- October 10, 2023
- 04:03 PM
- 0
Microsoft adds HSTS support to Exchange Server 2016 and 2019

Microsoft announced today that Exchange Server 2016 and 2019 now come with support for HTTP Strict Transport Security (also known as HSTS).
- Sergiu Gatlan
- August 29, 2023
- 12:19 PM
- 0
Microsoft will enable Exchange Extended Protection by default this fall

Microsoft announced today that Windows Extended Protection will be enabled by default on servers running Exchange Server 2019 starting this fall after installing the 2023 H2 Cumulative Update (CU14).
- Sergiu Gatlan
- August 28, 2023
- 03:20 PM
- 0
US cyber safety board to analyze Microsoft Exchange hack of govt emails

The Department of Homeland Security's Cyber Safety Review Board (CSRB) has announced plans to conduct an in-depth review of cloud security practices following recent Chinese hacks of Microsoft Exchange accounts used by US government agencies.
- Bill Toulas
- August 11, 2023
- 01:35 PM
- 0
Microsoft Exchange updates pulled after breaking non-English installs

Microsoft has pulled Microsoft Exchange Server's August security updates from Windows Update after finding they break Exchange on non-English installs.
- Lawrence Abrams
- August 10, 2023
- 02:26 PM
- 0
Microsoft: Hackers turn Exchange servers into malware control centers

Microsoft and the Ukraine CERT warn of new attacks by the Russian state-sponsored Turla hacking group, targeting the defense industry and Microsoft Exchange servers with a new 'DeliveryCheck' malware backdoor.
- Lawrence Abrams
- July 19, 2023
- 03:06 PM
- 0
New PowerExchange malware backdoors Microsoft Exchange servers

A new PowerShell-based malware dubbed PowerExchange was used in attacks linked to APT34 Iranian state hackers to backdoor on-premise Microsoft Exchange servers.
- Sergiu Gatlan
- May 24, 2023
- 03:17 PM
- 4
Exchange Online to block emails from vulnerable on-prem servers

Microsoft is introducing a new Exchange Online security feature that will automatically start throttling and eventually block all emails sent from "persistently vulnerable Exchange servers" 90 days after the admins are pinged to secure them.
- Sergiu Gatlan
- March 27, 2023
- 05:43 PM
- 2
Microsoft shares fix for Outlook login errors in Exchange environments

Microsoft has shared a fix for Outlook sign-in errors encountered by iOS and Android users with mailboxes in some Exchange environments.
- Sergiu Gatlan
- March 07, 2023
- 12:30 PM
- 0
Microsoft urges Exchange admins to remove some antivirus exclusions

Microsoft says some antivirus exclusions previously recommended for Exchange servers should be removed to boost their security.
- Sergiu Gatlan
- February 23, 2023
- 04:59 PM
- 0
Microsoft Exchange ProxyShell flaws exploited in new crypto-mining attack

A new malware dubbed 'ProxyShellMiner' exploits the Microsoft Exchange ProxyShell vulnerabilities to deploy cryptocurrency miners throughout a Windows domain to generate profit for the attackers.
- Bill Toulas
- February 16, 2023
- 04:03 PM
- 0
Microsoft: Exchange Server 2013 reaches end of support in April

Microsoft has reminded admins that Exchange Server 2013 is reaching its extended end-of-support (EOS) date in 60 days, on April 11, 2023.
- Sergiu Gatlan
- February 14, 2023
- 02:30 PM
- 0
Microsoft urges admins to patch on-premises Exchange servers

Microsoft urged customers today to keep their on-premises Exchange servers patched by applying the latest supported Cumulative Update (CU) to have them always ready to deploy an emergency security update.
- Sergiu Gatlan
- January 26, 2023
- 06:02 PM
- 2