Microsoft issues fix for CVE-2026-96940, a high-severity Exchange privilege-escalation flaw Attackers with compromised user credentials could access other employees’ mailboxes and emails No active ...

Microsoft has exposed a crafty case of OAuth app abuse that allowed the attackers to reconfigure the victim's Exchange server to send spam. The point of the elaborate attack was to make mass spam – ...

A weaponized, credential-free exploit for CVE-2026-62911 is publicly available on GitHub, and Shadowserver Foundation's daily scans flagged 21,899 unpatched Exchange servers worldwide as of August 31, ...

Once, reasonable people who cared about security, privacy, and reliability ran their own email servers. Today, the vast majority host their personal email in the cloud, handing off that substantial ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from ...

IT pros may face deadlines after some recent Exchange team announcements regarding Exchange Online. The to-do list for IT pros potentially includes the July 15, 2023 deprecation of the Remote ...

Microsoft released its largest security update in company history on September 8, 2026, closing 966 vulnerabilities across Windows, Office, Exchange Server, SQL Server, and Azure in a record-breaking ...