Exchange Server
The latest Exchange Server coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-59248 Exchange Spoofing Vulnerability: Critical Patch Released
Microsoft has urgently addressed a significant security threat to enterprise email systems with the release of patches for CVE-2025-59248, a spoofing vulnerability affecting Microsoft Exchange...
CVE-2025-59249: Critical Exchange Server EoP Vulnerability Patched
Microsoft has addressed a significant security vulnerability in Exchange Server with the October 2025 Patch Tuesday updates, marking another critical fix in the ongoing battle to secure enterprise...
Critical Exchange Hybrid flaw CVE-2025-53786 enables privilege escalation in email systems
A newly discovered elevation of privilege vulnerability in Microsoft Exchange Hybrid environments has security professionals scrambling to understand the implications and implement protective...
Final public security patches for Exchange 2016/2019 released; hybrid app enforcement begins.
Microsoft's October 2025 Security Updates for Exchange Server mark a significant milestone in the product's lifecycle, delivering critical security patches while signaling the end of publicly...
Exchange Server 2016/2019 End of Support: Migration Strategies and Security Risks
Microsoft has officially ended support for Exchange Server 2016 and Exchange Server 2019 as of October 14, 2025, marking a critical inflection point for organizations still running these on-premises...
Windows Server 2025 Schema Replication Risk During Exchange Updates
Microsoft has issued a critical warning to IT administrators about a potentially devastating Active Directory schema replication issue that can occur when applying Exchange Server cumulative updates...
Exchange 2016/2019 End-of-Support Deadline Looms: Hybrid Enforcement Windows and Migration Imperatives
Microsoft's Exchange engineering team has issued a final T-minus-30-days warning: support for Exchange Server 2016 and Exchange Server 2019 will end on October 14, 2025. After that date, businesses...
Microsoft Ships September 2025 Exchange Hotfixes to Keep Hybrid Apps Running as October 31 Deadline Looms
Microsoft released a targeted set of Hotfix Updates (HUs) for Exchange Server this September, delivering a non‑security fix while ensuring the newly engineered dedicated Exchange hybrid application...
CISA Emergency Directive Targets Exchange Hybrid Flaw in August Patch Tuesday Deluge
The Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive late Tuesday, ordering federal agencies to secure on-premises Exchange servers within hours after a newly...
100+ Patches, a Kerberos Crisis, and Exchange's Last Stand: Unpacking Microsoft's August Security Blitz
Microsoft didn’t just drop a routine Patch Tuesday in August 2025. The company shipped fixes for over 100 security flaws, unveiled a one-time Extended Security Update (ESU) program that gives...
Microsoft’s August Update Plugs Kerberos Zero-Day; Two 9.8-Rated RCEs Demand Immediate Patching
Administrators rushed to patch domain controllers this week as Microsoft’s August 2025 Patch Tuesday landed with a publicly disclosed Kerberos elevation-of-privilege flaw (CVE-2025-53779) and two...
Domain Controllers at Risk: Microsoft’s August Update Closes Kerberos dMSA Vulnerability Amid 100+ Fixes
Microsoft’s August 2025 Patch Tuesday release lands with an urgent fix for a Kerberos vulnerability that could allow attackers to escalate to domain administrator, alongside more than a dozen other...