Here you will find all the articles with the tag: microsoft exchange.
Microsoft confirms that cybercriminals are exploiting two zero-day vulnerabilities in Exchange Server 2013, 2016 and 2019. The vulnerabilities allow cybercriminals to conduct remote code execution attacks. The bugs were discovered by GTSC. The security company published a mitigation guide. The ... Read more
2 months ago
Microsoft warned of malicious OAuth applications attacking cloud users by hijacking Exchange servers. The cybercriminals aim to spread large amounts of spam. According to Microsoft, cybercriminals have launched credential-stuffing attacks against users with Exchange accounts that lack multi-fact... Read more
3 months ago
Thousands of users are experiencing problems with Outlook and Exchange Online. Microsoft confirmed the outage on Twitter. The tech giant is researching the cause. DownDetector received thousands of reports from Outlook.com and Exchange Online users being unable to log in or send emails over the ... Read more
5 months ago
Kaspersky researchers discovered a new malware variant that attacks Microsoft Exchange servers. 'SessionManager' installs a backdoor on affected systems. According to the researchers, mitigation is a difficult process. Kaspersky notes that SessionManager has been active for 15 months. Some 34 s... Read more
5 months ago
Microsoft will cease support for Exchange 2013 Service Pack 1 on 11 April 2023. The tech giant advises users to update to Exchange 2019 as soon as possible. In a message to end-users, Microsoft announced that server software Exchange 2013 Service Pack 1 will no longer be supported as of 11 Apri... Read more
5 months ago
Microsoft Exchange Server won't get a new on-premises version until 2025. The latest version, Exchange Server 2019, will be supported throughout the coming years. This is made evident by an update in the development roadmap. Microsoft gives the roadmap to inform on the developments of Exchange ... Read more
6 months ago
Microsoft patched an important vulnerability in Microsoft Exchange Server during Patch Tuesday. In addition, 70 other issues were addressed. CVE-2022-23277 allowed cybercriminals to remotely activate malicious code via a network call to a server account. Ultimately, lateral moves allowed hackers... Read more
9 months ago
Microsoft released a quick patch for a Microsoft Exchange server bug that occurred on January 1 of this year. The bug prevented on-premises Exchange servers from sending emails. The problem was caused by date checks after the year change. The bug caused Exchange Server 2016 and Exchange Server 2... Read more
11 months ago
Microsoft squashes multiple vulnerabilities in its solutions. Among them is critical spoofing vulnerability CVE-2021-43890, frequently exploited for Emotet, Trickbot and Bazaloader attacks. Microsoft releases a December update fixing various vulnerabilities through no less than 67 patches. In No... Read more
12 months ago
The Microsoft Exchange email server has been found to leak credentials to unauthenticated users. It was found and detailed by Guardicore. The issue relates to the Microsoft Autodiscover protocol. The protocol is a feature in Exchange email servers, designed to make the configuration of clients s... Read more
1 year ago
