Category: Exchange
October 12th, 2021 by Exchange
Microsoft has released security updates for vulnerabilities found in:
Exchange Server 2013
Exchange Server 2016
Exchange Server 2019
These updates are available for the following specific builds of Exchange Server:
IMPORTANT: If manually installing security updates, you must install .msp from elevated command prompt (do not choose Run after download).
Exchange Server 2013 CU23
Exchange Server 2016 CU21 and CU22
Exchange Server 2019 CU10 and CU11
The October 2021 security updat...
Keep on reading:
Released: October 2021 Exchange Server Security Updates
Posted in Exchange
October 5th, 2021 by Exchange
Over the last few years, we have invested heavily in Microsoft Graph to enable developers to access the rich data available in Microsoft 365. Microsoft Graph, along with OAuth 2.0, provides increased security and seamless integration with other Microsoft cloud services....
Keep on reading:
Upcoming API Deprecations in Exchange Web Services for Exchange Online
Posted in Exchange
October 1st, 2021 by Exchange
Now that the September 2021 Cumulative Updates (CUs) for Exchange Server 2019 and Exchange Server 2016 have been released, customers around the world now have access to a new security feature in Exchange Server called the Microsoft Exchange Emergency Mitigation service (EEMS). We want to address some of the initial feedback we’ve received about EEMS, which we’re thrilled to say has been very positive....
Keep on reading:
Addressing Your Feedback on the Exchange Emergency Mitigation Service
Posted in Exchange
September 28th, 2021 by Exchange
Today we are announcing the availability of quarterly Cumulative Updates (CUs) for Exchange Server 2016 and Exchange Server 2019. These CUs include fixes for customer reported issues, all previously released security updates, and a new security feature.
A full list of fixes is contained in the KB article for each CU, but we wanted to highlight a few changes.
Microsoft Exchange Emergency Mitigation Service
As mentioned in our recent blog post, September 2021 CUs (and later) include the new M...
Keep on reading:
Released: September 2021 Quarterly Exchange Updates
Posted in Exchange
September 24th, 2021 by Exchange
Security is a top priority for Microsoft and our customers, and we continue to work very hard to keep customer data secure from cyber-threats, while ensuring compliance with evolving regulations. As part of our continued work to help you protect your Exchange Servers, in the September 2021 Cumulative Update (CU) we have added a new feature called the Microsoft Exchange Emergency Mitigation service. This new service is not a replacement for installing Exchange Server Security Updates (SUs), but...
Keep on reading:
New security feature in September 2021 Cumulative Update for Exchange Server
Posted in Exchange
September 23rd, 2021 by Exchange
In February 2021, we announced some changes to our plan for turning off Basic Authentication in Exchange Online. In summary, we announced we were postponing disabling Basic Auth for protocols in active use by your tenant until further notice, but that we would continue to disable Basic Auth for all protocols not being used. The overall scope of the program was also extended to include Exchange Web Services (EWS), Exchange ActiveSync (EAS), POP, IMAP, Remote PowerShell, MAPI, RPC, SMTP AUTH and...
Keep on reading:
Basic Authentication and Exchange Online – September 2021 Update
Posted in Exchange
September 17th, 2021 by Exchange
We typically release Cumulative Updates (CUs) for Exchange Server on the third Tuesday of a month. In September 2021, that would be September 21st. Today we want to let you know that we will be releasing the September CUs for Exchange Server a week later, on September 28th instead....
Keep on reading:
Delay of September 2021 Cumulative Update for Exchange Server
Posted in Exchange
September 9th, 2021 by Exchange
A few months back, we announced the general availability of the new Exchange admin center (EAC). The new EAC offers a faster, more secure, and more intelligent modern admin experience than the classic EAC and is helping admins work more efficiently. With the new EAC providing the majority of admin capabilities, today we are at the next stage of our journey, and we are announcing the retirement of the classic EAC in our WW deployment, to be fully deprecated by September 30, 2022....
Keep on reading:
Deprecation of the classic Exchange admin center in WW service
Posted in Exchange
August 25th, 2021 by Exchange
This past week, security researchers discussed several ProxyShell vulnerabilities, including those which might be exploited on unpatched Exchange servers to deploy ransomware or conduct other post-exploitation activities. If you have installed the May 2021 security updates or the July 2021 security updates on your Exchange servers, then you are protected from these vulnerabilities. Exchange Online customers are also protected (but must make sure that all hybrid Exchange servers are updated)....
Keep on reading:
ProxyShell vulnerabilities and your Exchange Server
Posted in Exchange
August 18th, 2021 by Exchange
Exchange Online ended supported for TLS1.0 and TLS1.1 in October 2020. We know that the push to meet our security and compliance requirements has made it difficult to support legacy clients and devices that use our service. A balance is needed in a shared service that hosts the emails of local bakeries as well as many countries’ governments....
Keep on reading:
New opt-in endpoint available for SMTP AUTH clients still needing legacy TLS
Posted in Exchange