Trusted by more than 2500 companies with over 5 million users
3 10, 2022

CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability

2025-05-13T08:04:52-04:00

Advisory Release CVE-2022-41082 was publicly disclosed by Microsoft on September 30, 2022, after being identified as part of an active exploitation campaign targeting Microsoft Exchange servers. The vulnerability was included in CISA’s Known Exploited Vulnerabilities (KEV) catalog on the same day, underscoring its significance and the urgency for remediation. Key Details CVE-2022-41082 is a remote [...]

CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability2025-05-13T08:04:52-04:00
26 09, 2022

Exchange Online Servers Hacked Using Malicious OAuth Applications

2022-12-16T10:13:14-05:00

Microsoft’s 365 Defender Research Team recently investigated an attack in which malicious OAuth applications were deployed on compromised cloud tenants. Initial Access The attacker first needed to compromise a cloud user’s account that had sufficient permissions in order to create a malicious OAuth application. The threat actor did this by launching credential-stuffing attacks against high-risk [...]

Exchange Online Servers Hacked Using Malicious OAuth Applications2022-12-16T10:13:14-05:00
19 09, 2022

CISA Publishes Mitigation Techniques Against Exchange Server Attacks

2023-09-13T10:31:00-04:00

In response to the recent targeting of critical infrastructure in the US and abroad, the Cybersecurity and Infrastructure Security Agency (CISA) urges network and security administrators to prepare and immediately mitigate potential cyber threats with the following measures. Implement and apply backup and recovery policies and procedures: Maintain offline backups of data Regularly test backup and restoration Ensure [...]

CISA Publishes Mitigation Techniques Against Exchange Server Attacks2023-09-13T10:31:00-04:00
13 09, 2022

Nemesis Kitten targets Exchange Server for Attacks

2022-12-27T07:20:19-05:00

Microsoft Security Threat Intelligence has been tracking multiple ransomware campaigns by a group known as DEV-0270 who also goes by the alias Nemesis Kitten. Who is DEV-0270? DEV-0270, a sub-group of the Iranian threat actor known as PHOSPHORUS, are known for leveraging newly disclosed vulnerabilities against their targets. If successful, the group contacts the victim [...]

Nemesis Kitten targets Exchange Server for Attacks2022-12-27T07:20:19-05:00
26 08, 2022

Microsoft Exchange Server Security: The 10 Best Ways to Secure Your Server

2025-06-12T12:28:23-04:00

Security breaches cause organizational chaos, financial and reputation risk. Given how organizations have shifted to a hybrid of in-office and work-from-home, there is a significant increase in the security threat landscape, and it’s more important than ever to improve and harden Exchange Server security. These best practices help provide a baseline security framework that all [...]

Microsoft Exchange Server Security: The 10 Best Ways to Secure Your Server2025-06-12T12:28:23-04:00
24 08, 2022

Microsoft Exchange – Messageware Q3 2022 Newsletter

2022-08-24T10:47:09-04:00

Exciting news, MEC (The Microsoft Exchange Conference) is back! The biggest Exchange gathering of the year will be taking place ‘virtually’ Sept 13-14, 2022. It’s been 8 years since the last MEC and we’re excited for candid Q&A and hearing more from Microsoft on the future of Exchange Server. Here’s a link to the registration - https://aka.ms/MECAirlift! Released: [...]

Microsoft Exchange – Messageware Q3 2022 Newsletter2022-08-24T10:47:09-04:00
10 08, 2022

Microsoft August 2022 Patch Tuesday: Exchange Server vulnerabilities fixed

2023-04-24T06:56:38-04:00

Microsoft has released security updates (SUs) for vulnerabilities found in: Exchange Server 2013 Exchange Server 2016 Exchange Server 2019 The SUs address vulnerabilities responsibly reported to Microsoft by security partners and found through Microsoft’s internal processes. Although we are not aware of any active exploits in the wild, our recommendation is to immediately install these updates to [...]

Microsoft August 2022 Patch Tuesday: Exchange Server vulnerabilities fixed2023-04-24T06:56:38-04:00
22 06, 2022

Customer Stories – A Missouri Police Department

2022-08-24T09:48:49-04:00

When Messageware was approached by a Missouri police department to assist with administrative streamlining, Messageware had the ideal solution. Issues at Hand The department’s administrative staff had been complaining of no MailTo ability for attachments since moving to Office 365. Staff had to re-login to the Outlook web session before they could navigate to attach [...]

Customer Stories – A Missouri Police Department2022-08-24T09:48:49-04:00
22 06, 2022

Customer Stories – Australian Apparel Retail Chain

2024-12-03T11:04:30-05:00

When an Australian family-owned apparel retailer found Office 365 hindering their 500+ employees they turned to Messageware. The issue at hand: A customer since 2016, their business uses over one hundred Office 365 K1 Kiosk accounts for their retail stores. As none of these kiosks have mail clients installed on their local computers, they were [...]

Customer Stories – Australian Apparel Retail Chain2024-12-03T11:04:30-05:00
22 06, 2022

Collision Repair Centre uses ActiveSend to Accelerate Assessment Process with Outlook Web

2022-08-24T09:47:13-04:00

When a chain of collision repair centers in the northeast USA discovered that Outlook web was hindering their unmatchable turnaround times, they approached Messageware. The issue at hand: Staff capture repair estimates for submission to insurers using kiosks conveniently located beside damaged vehicles. However, submitting a vehicle collision report becomes frustrating and time-consuming because Outlook [...]

Collision Repair Centre uses ActiveSend to Accelerate Assessment Process with Outlook Web2022-08-24T09:47:13-04:00
25 05, 2022

Microsoft Exchange Server – Security Updates – May 2022

2022-06-11T11:54:01-04:00

Microsoft has released security updates (SUs) for vulnerabilities found in Exchange Server 2013, Exchange Server 2016, Exchange Server 2019.

Microsoft Exchange Server – Security Updates – May 20222022-06-11T11:54:01-04:00
15 05, 2022

IceApple exploit framework targeting Microsoft Exchange servers

2022-12-27T07:22:34-05:00

Stealthy, “highly sophisticated” post-exploitation framework used for data exfiltration likely the work of a state-sponsored threat actor. In late 2021, security researchers on CrowdStrike’s Falcon OverWatch team first detected a modular exploit targeting Microsoft Exchange Servers. Dubbed IceApple, the .NET-based framework has been observed in “distinct locations” and primarily directed toward entities in government, academic [...]

IceApple exploit framework targeting Microsoft Exchange servers2022-12-27T07:22:34-05:00
10 05, 2022

Microsoft Exchange Server Build Numbers, Cumulative Updates (CU), Security Updates (SU) and Release Dates

2025-07-15T10:21:33-04:00

You can use the information in this article to verify the version of Exchange that is running in your organization. This article is organized into sections by Exchange version (2010, 2013, 2016, 2019). Microsoft's monthly “Patch Tuesday” releases are listed below, with their corresponding build numbers and release dates for each Service Pack (SP), Cumulative [...]

Microsoft Exchange Server Build Numbers, Cumulative Updates (CU), Security Updates (SU) and Release Dates2025-07-15T10:21:33-04:00
26 04, 2022

Microsoft Exchange – Messageware Q2 2022 Newsletter

2023-12-01T14:45:18-05:00

In 2022, a wave of cyberattacks and data breaches swept across the globe after multiple zero-day exploits were discovered in on-premises Microsoft Exchange Servers, giving attackers full access to servers and email. Recently, businesses were warned that Chinese and Russian cyberattacks are imminent and that business leaders must act to strengthen their digital defences. Here [...]

Microsoft Exchange – Messageware Q2 2022 Newsletter2023-12-01T14:45:18-05:00
22 04, 2022

Microsoft Exchange Server – Cumulative Updates – April 2022

2022-06-14T06:55:46-04:00

On April 20, 2022 Microsoft released new Cumulative Updates: Exchange 2016 CU23 and Exchange 2019 CU12. The previous Cumulative Updates were released on September 28, 2021, more than 6 months ago.

Microsoft Exchange Server – Cumulative Updates – April 20222022-06-14T06:55:46-04:00
10 03, 2022

Microsoft March 2022 Patch Tuesday: 2 Exchange Server vulnerabilities fixed

2022-06-01T12:18:47-04:00

The March 2022 SUs for Exchange Server address vulnerabilities responsibly reported by security partners and found through Microsoft’s internal processes. Although we are not aware of any active exploits in the wild, our recommendation is to install these updates immediately. These vulnerabilities affect on-premises Exchange Server, including servers used by customers in Exchange Hybrid mode. Exchange [...]

Microsoft March 2022 Patch Tuesday: 2 Exchange Server vulnerabilities fixed2022-06-01T12:18:47-04:00
17 02, 2022

Microsoft launches quarterly Cyber Security Intelligence Brief

2022-06-14T06:54:14-04:00

Microsoft has just launched a quarterly cyber threat intelligence brief branded Cyber Signals. The new publication offers an expert perspective into the current threat landscape, discussing trending tactics, techniques, and strategies used by the world’s most prolific threat actors.  Cyber Signals is aimed at Chief Information Security Officers, Chief Information Officers, Chief Privacy Officers, and their teams, as they continue [...]

Microsoft launches quarterly Cyber Security Intelligence Brief2022-06-14T06:54:14-04:00
8 02, 2022

Microsoft revisits the Priority Account Protection in 365

2022-06-14T06:54:33-04:00

Microsoft revisits the Priority Account Protection in 365:  (Microsoft 365 Defender): Applying a higher level of protection to accounts likely to be targeted by attackers is a more compelling offer as the last thing you want is for an executive to fall foul of a business email compromise attack or other phishing attempts like the recent Office VoIP voicemail [...]

Microsoft revisits the Priority Account Protection in 3652022-06-14T06:54:33-04:00
11 01, 2022

Microsoft Exchange Server – January 2022 Exchange Server Security Updates

2022-06-14T06:56:33-04:00

January 2022 Exchange Server Security Updates Microsoft has released security updates for vulnerabilities found in: Exchange Server 2019 Cumulative Update 11 Security Update 3 (KB5008631) Exchange Server 2019 Cumulative Update 10 Security Update 4 (KB5008631) Exchange Server 2016 Cumulative Update 22 Security Update 3 (KB5008631) Exchange Server 2016 Cumulative Update 21 Security Update 4 (KB5008631) Exchange [...]

Microsoft Exchange Server – January 2022 Exchange Server Security Updates2022-06-14T06:56:33-04:00
4 01, 2022

Microsoft Releases Emergency Y2K22 Patch For On-Prem Exchange Server

2022-06-14T06:56:46-04:00

As we all ushered in the New Year, a date check failure in Exchange Server 2016 and 2019 made it impossible for Exchange servers to accommodate the year 2022. The bug, dubbed 'the Y2K22 bug' prevented on-premise Microsoft Exchange servers from sending millions of emails. Fortunately, Microsoft was quick to act and has released an [...]

Microsoft Releases Emergency Y2K22 Patch For On-Prem Exchange Server2022-06-14T06:56:46-04:00