Feb 13, 2024, users connecting to Exchange Online with the latest version of Outlook Desktop are being impacted, as reported today by Petri and Windows Report news sites. The issue has been occurring since early February and is under investigation by Microsoft. The ActiveSync issues are specific to those with 365 Exchange Online, and those [...]
CVE-2024-21410 is a critical vulnerability in Microsoft Exchange Server, presenting an elevation of privilege. It has a CVSS score of 9.8. This vulnerability enables attackers to execute authentication relay attacks by misusing the Net-NTLMv2 protocol. Vendor: Microsoft Product: Microsoft Exchange Server Vulnerability Type: Elevation of Privilege Base CVSS Score: 9.8 (Critical) Follow this link for [...]
On January 19th, Microsoft disclosed that a group of Russian state-sponsored hackers, known as Nobelium or Midnight Blizzard, infiltrated its corporate systems and accessed sensitive emails from members of its leadership team. New details have now emerged explaining how the attackers gained entry and what they were after. The initial breach occurred in late November [...]
October has been a busy month of changes for Exchange Online users. This article summarizes recent updates and announcements from Microsoft on the Exchange Team Blog. 1) Farewell to Remote PowerShell in Exchange Online Earlier this year, Microsoft officially depreciated the Remote PowerShell Protocol (RPS) in Exchange Online. This month, RPS is no longer available [...]
Great news - Messageware has reached a significant milestone in its journey. Our software is now used in an impressive 55 countries worldwide! Our dedicated team of experts continuously improve our Microsoft Exchange Server security software to stay ahead of ever-evolving cyber threats. We’re proud of our growing client base: 2500+ enterprises in all industries; [...]
ProxyShell and ProxyLogon are two high severity exploits against Microsoft Exchange Servers discovered in 2021. Both vulnerabilities enable threat actors to perform remote code execution on vulnerable systems. A year later, another easily exploitable vulnerability named ProxyNotShell is threatening unpatched Exchange Servers. Here's a great article we recommend you read: Microsoft Exchange ProxyNotShell vulnerability explained [...]
Advisory Release CVE-2022-41082 was publicly disclosed by Microsoft on September 30, 2022, after being identified as part of an active exploitation campaign targeting Microsoft Exchange servers. The vulnerability was included in CISA’s Known Exploited Vulnerabilities (KEV) catalog on the same day, underscoring its significance and the urgency for remediation. Key Details CVE-2022-41082 is a remote [...]
Microsoft has just launched a quarterly cyber threat intelligence brief branded Cyber Signals. The new publication offers an expert perspective into the current threat landscape, discussing trending tactics, techniques, and strategies used by the world’s most prolific threat actors. Cyber Signals is aimed at Chief Information Security Officers, Chief Information Officers, Chief Privacy Officers, and their teams, as they continue [...]
As we all ushered in the New Year, a date check failure in Exchange Server 2016 and 2019 made it impossible for Exchange servers to accommodate the year 2022. The bug, dubbed 'the Y2K22 bug' prevented on-premise Microsoft Exchange servers from sending millions of emails. Fortunately, Microsoft was quick to act and has released an [...]
Messageware’s Exchange Protocol Guard (EPG) gives organizations peace of mind that their key messaging protocols are protected. Toronto – Jan 23, 2020: Messageware, Inc., the leader in Microsoft Exchange security and productivity tools, today announced the release of Messageware Exchange Protocol Guard (EPG). Messageware EPG is unique in that it provides on-premises Microsoft Exchange Servers [...]
Department of Defense (DoD) contractors and suppliers must ensure they are compliant with Defense Federal Acquisition Regulation Supplement (DFARS). What is DFARS? In 2015, the DoD reported that hackers had stolen over 21 million personally identifiable records of government employees, contractors, and their families from The Office of Personnel Management. In response to this incident [...]
In this post, we talk to Matt Singh, Senior Enterprise Account Manager at Messageware. Matt has been working with Messageware clients for over 10-years and has an intimate knowledge of the key challenges they face when migrating users from desktop Outlook to Outlook Web App (OWA), for Office 365 and on-premises users. Here's what he [...]
TORONTO - Oct. 7, 2015 - Messageware www.messageware.com, the world's leading provider of enterprise productivity and security solutions for Microsoft Exchange, today announced the release of seven Messageware software products for Exchange 2016. Organizations that are planning to adopt Exchange 2016 can now implement these essential products. With Messageware 2016, administrators easily apply their corporate security policies and users [...]
Congratulations to the Microsoft Exchange team on the release of Exchange 2016! Exchange Server 2016 brings innovation to a broad set of areas, including individual productivity, team collaboration, and information governance. In the words of Microsoft: “Most of the new features in Exchange Server 2016 were birthed in the cloud and then refined in a [...]
With the launch of the new Outlook Mobile App into the Apple and Android stores, there are a number of new security concerns from the Microsoft Exchange community. Perhaps the gravest concern for those using the new App are that Microsoft stores email credentials in, and transfers company email data through the cloud (initially Amazon [...]
President's Message from Mark Rotman Happy Holidays from the staff at Messageware This edition of the Messageware Newsletter is all about product updates. We have been busy adding to our 2013 functionality, and ensuring all our Messageware products fully support each of Microsoft's Cumulative Updates and Rollups. If you are planning to upgrade or patch [...]
