Tag: exchange server
6 articles
Unpatched Microsoft Exchange Servers Exposed to Hijack Attacks
Thousands of Microsoft Exchange servers remain vulnerable to a high-severity flaw, leaving 21,899 internet-facing systems open to hijack attacks that could give attackers control of every mailbox. This unpatched authentication-bypass vulnerability, CVE-2026-62911, was fixed by Microsoft in August, but many servers still haven't been updated.
Microsoft Delays Exchange Update Citing AI-Driven Bug Discovery
Microsoft's Exchange team is working on Cumulative Update 1 (CU1) for Exchange Server Subscription Edition, but has delayed its release due to an unexpected bug discovery driven by AI, leaving customers waiting a bit longer for the update that packs recent bug fixes, new features, and code refinements. The team promises it's on the way, but a new timeline isn't available just yet.
Microsoft Ends Exchange 2016, 2019 Security Updates in October
Microsoft is ending security updates for Exchange Server 2016 and 2019 in October 2026, with no further extensions available, even for those currently in Period 2 of the Extended Security Update program. This marks the final cutoff for support, leaving organizations without updates after that date.
Microsoft to Phase Out OWA Light in Exchange Server Update
Microsoft is bidding farewell to OWA Light, shifting its focus to the full Outlook on the web experience, which promises a more seamless and modern way to access your inbox. By August 2026, the tech giant will retire OWA Light, streamlining its engineering efforts and enhancing the overall user experience.
Microsoft Fixes Zero-Day Flaw in Exchange Server Exploited in Attacks
Microsoft has patched a high-severity flaw in Exchange Server, known as CVE-2026-42897, which allowed hackers to execute malicious JavaScript in victims' browsers simply by sending a specially crafted email. This zero-day vulnerability was actively exploited in attacks, putting Outlook Web Access users at risk.
Microsoft Offers Lifeline for Laggard Exchange, Skype Customers
Microsoft is throwing a lifeline to organizations still relying on outdated Exchange Server and Skype for Business Server, offering extended security updates for a fee to help bridge the gap to newer products. This move acknowledges that some businesses need more time to migrate, providing a temporary safety net for those lagging behind.