Category: Microsoft Exchange

In their continued effort to improve the security of on-premise Exchange Servers, Microsoft released another security update for all current Exchange Server versions in August 2022. In addition to this update, Microsoft highly recommends administrators to enable the so called Windows Extended Protection (WEP) on their Exchange Servers. The extended protection “enhances the existing Windows… Continue reading Is my Exchange Server ready for Windows Extended Protection (WEP)?

Microsoft is continuing its efforts to make their on-premise Exchange products more secure. With this month’s update, we see two CVE’s being fixed: CVE-2022-24463 A spoofing vulnerability in Exchange 2016 and 2019 possibly exposing files on the Exchange Server to an authenticated attacker. CVE-2022-23277 A remote code execution vulnerability in Exchange 2013, 2016 and 2019.… Continue reading Exchange Server March 2022 Security Updates Now Available

Today I’m writing about an ongoing story about a very serious Zero Day vulnerability that is present in more or less all current versions of Microsoft’s Exchange Server products. At this time, a Chinese hacker group that goes by the name HAFNIUM is actively using this vulnerability to exploit Exchange Servers, steal data, and to… Continue reading HAFNIUM Exchange Server Zero Day Exploit. What to know / What to do?

Last week I was updating one of my customer’s Exchange 2016 Servers to CU19. Usually this is a rather simple and straightforward task, which normally takes between 1 and N hours. That of course, only as long as nothing goes wrong…. While this update was approaching step 17 of 18, the message “Microsoft Exchange stopped… Continue reading Exchange Server Setup fails with DependentAssemblyGenerator.exe error.