Security news aggregator

Latest coverage for Exchange Server

Stay updated on Exchange Server security with the latest news, updates, and expert insights into protecting your email communications effectively.

7 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Exchange Server is a Microsoft server platform for organizational email, calendars, contacts, and mailbox storage. It may run within an organization or as part of a hybrid environment, and commonly exposes web, mail-transfer, and administration interfaces. Because it stores business communications and can mediate access to accounts, it is a high-value system for security teams.

Security concerns include exploitation of vulnerabilities in internet-facing services, theft or misuse of privileged accounts, and unauthorized mailbox access through weak authentication or compromised credentials. Protection requires prompt, tested security updates; minimizing and monitoring external exposure; strong authentication for administrators and remote access; and careful separation of administrative privileges. Logs from web access, authentication, mailbox activity, and mail flow support detection and investigation. Organizations should also maintain tested backups and recovery procedures, while applying retention, access-control, and privacy requirements to stored messages and attachments.

Volume over time

Weekly headline count for the current query.

Showing 7 most recent headlines Filtered view

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Microsoft Exchange Server, tracked as CVE-2026-9082 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. Drupal issued a highly critical security patch on May […]

More from Security Affairs 24 May 2026, 7:54 p.m. Theme · 2 stories Actively exploited CVE-2026-9082 America CISA CVE Exchange Server Flaw Microsoft Patch Vulnerability

Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates

More from The Hacker News 15 Feb 2024, 6:19 p.m. Actively exploited CVE-2024-21410 CVE Disclosure Exchange Server Flaw Microsoft Patch Patch Tuesday Privilege Escalation Vulnerability

More than 60,000 Microsoft Exchange servers exposed online are yet to be patched against the CVE-2022-41082 remote code execution (RCE) vulnerability, one of the two security flaws targeted by ProxyNotShell exploits. [...]

More from Bleeping Computer 4 Jan 2023, 9:51 a.m. Actively exploited CVE-2022-41082 CVE Exchange Server Exploit Exposure Flaw Microsoft Patch Remote Code Execution Vulnerability