On-Premise Chosen over Microsoft 365 due to Server Privacy Concerns
In an ongoing battle that started in 2018 with the EU, several state courts, including the federal German court, found that Microsoft 365 was not compliant with GDPR laws. The ban mostly affects...
View ArticleMicrosoft November 2022 Patch Tuesday: Exchange Server Security Updates
Microsoft has released security updates for two zero-day vulnerabilities: CVE-2022-41040, a server-side request forgery vulnerability, and CVE-2022-41082, which allows remote code execution....
View ArticleProxyNotShell Proof-of-Concept Published Online
Security researchers confirm Proof-of-Concept (PoC) works against unpatched versions of Microsoft Exchange Server 2013, 2016 and 2019 In early August, researchers discovered cyberattacks against...
View ArticleMicrosoft Exchange ProxyNotShell Vulnerability Explained and How to Mitigate It
ProxyShell and ProxyLogon are two high severity exploits against Microsoft Exchange Servers discovered in 2021. Both vulnerabilities enable threat actors to perform remote code execution on vulnerable...
View ArticleRansomware Group Targets Microsoft Exchange Server with New Exploit OWASSRF
Threat actors affiliated with the Play ransomware strain are leveraging a never-before-seen exploit method that bypasses Microsoft’s ProxyNotShell URL rewrite mitigation. A New Exploit Chain...
View ArticleMicrosoft January 2023 Patch Tuesday: Exchange Server Security Updates
Microsoft has released Security Updates (SUs) for vulnerabilities found in: Exchange Server 2013 Exchange Server 2016 Exchange Server 2019 The updates address the following vulnerabilities:...
View ArticleMicrosoft Exchange Server 2013 Nears End of Support
Exchange Server 2013 will reach its end of support on April 11, 2023. If you haven’t already begun your migration from Exchange 2013 to Microsoft 365, Office 365, or Exchange 2019, now’s the time to...
View ArticleMicrosoft February 2023 Patch Tuesday: Exchange Server Security Updates
Microsoft has released patches to fix numerous vulnerabilities in the February 2023 Patch Tuesday release including remote code execution in Exchange Server. Official announcement can be found here....
View ArticleMicrosoft issues one month EOL warning for Exchange Server 2013
Microsoft recently posted that users have a mere 31 days left to migrate away from Exchange Server 2013 before it reaches End-of-life (EOL). The Exchange Team has confirmed that even though support is...
View ArticleMicrosoft Exchange – Messageware Q1 2023 Newsletter
We’ve seen a wave of cyberattacks and data breaches that swept across the globe with multiple zero-day exploits discovered in Exchange Online and On-premises. Microsoft is urging admins to protect...
View Article