Tag Archives: Exchange

Exchange 2016/2019 now warns against exploiting the spoofing vulnerability CVE-2024-49040 in emails

Posted on 2024-11-16 by guenni

[German]Microsoft's November 2024 security updates for Exchange, has added a new feature to its Exchange 2016 and Exchange 2019 servers. Microsoft Exchange now warns when receiving emails that exploit a spoofing vulnerability (Exchange Server non-RFC compliant P2 FROM header detection … Continue reading →

Posted in Security, Software, Update | Tagged , , , | Leave a comment
Advertising

Exchange Server: November 2024 security updates pulled

Posted on 2024-11-15 by guenni

[German]Disaster for administrators of Microsoft Exchange Server 2016 and 2019 systems who have installed the security updates from November 12, 2024. The transport rules no longer work after applying the November 2024 security update. Microsoft has now stopped the deployment … Continue reading →

Posted in issue, Security, Software, Update | Tagged , , , | Leave a comment

Microsoft Exchange Server Updates November 12, 2024

Posted on 2024-11-13 by guenni

[German]Microsoft has released security updates (SU) for Exchange Server 2016 and 2019 on November 12, 2024. These updates close vulnerabilities found by Microsoft or security partners in Exchange Server. Below is an overview of which updates are available for Exchange … Continue reading →

Posted in Security, Software, Update | Tagged , , | Leave a comment

Outlook to Exchange auto-discovery and the duplicate .com.com domain

Posted on 2024-07-13 by guenni

[German]I'm posting a curious reader observation here in the blog. It's about the auto-discovery of e-mail recipients in Outlook via the auto-discovery service in Microsoft Exchange. One reader noticed a crude problem in this context. Someone seems to have registered … Continue reading →

Posted in Allgemein, Security, Software | Tagged , , | Leave a comment

HornetSecurity quarantines Microsoft Exchange emails (July 2, 2024)

Posted on 2024-07-03 by guenni

[German]A information to the administrators among the blog readership who use HornetSecurity to filter mails (e.g. in Microsoft Exchange). A reader informed me that the mails in question (for Exchange) have been quarantined. On the HornetSecurity status page there is … Continue reading →

Posted in Cloud, Security, Software | Tagged , , | 1 Comment
Advertising

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Microsoft Exchange Server: Keylogger steals credentials from government organizations worldwide

Posted on 2024-05-22 by guenni

[German]Security researchers have discovered a keylogger that infects government organizations worldwide, as well as banks and other institutions via Microsoft Exchange Server. The keylogger was found after an infection on the main page of a customer's Exchange Server. The purpose … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment
Advertising

Microsoft has fixed an Exchange EWS issue from March 14, 2024 on Macs

Posted on 2024-03-23 by guenni

[German]A small addendum from this week. A reader emailed me a few days ago to say that there was a problem with Microsoft Exchange in connection with a mail client with EWS. According to the reader's observations, this has been … Continue reading →

Posted in issue, macOS | Tagged , , | Leave a comment

More than 28,500 Exchange servers vulnerable via CVE-2024-21410; more software affected?

Posted on 2024-02-21 by guenni

[German]Since February 13, 2024, a vulnerability CVE-2024-21410 has been known, through which attackers can access NTLM hashes via Microsoft Exchange Server and then misuse them for NTLM relay or pass-the-hash attacks. I have now read that more than 28,500 Exchange … Continue reading →

Posted in Security, Software | Tagged , | Leave a comment
Advertising

Follow-up on CU 14 for Exchange 2019 and vulnerability CVE-2024-21410 (Feb. 2024)

Posted on 2024-02-16 by guenni

[German]On February 13, 2024, a critical vulnerability CVE-2024-21410 in Microsoft Exchange Server became public. The Elevation of Privilege vulnerability has a CVEv3 score of 9.8 and is likely to be exploited (soon). Security authorities are warning about this vulnerability. However, … Continue reading →

Posted in Security, Software | Tagged , , | Leave a comment

Exchange Server Cumulative Update CU 14 (February 13, 2024)

Posted on 2024-02-14 by guenni

[German]Microsoft has released the cumulative update CU 2024 H1 for Exchange Server 2019 on February 13, 2024. This update (CU 14) contains fixes for customer-reported issues, a security change and all previously released security updates (SUs). Advertising

Posted in Security, Software, Update | Tagged , , , | Leave a comment