News · via BleepingComputer
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working.
Exchange
Coverage tagged "Exchange".
News · via Microsoft Security Response Center
CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
News · via CyberScoop
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Microsoft researchers attributed the recent supply-chain attack targeting ConnectWise customers’ Microsoft 365 environments to a China-state aligned threat actor it tracks as Storm-0940. “As early as…
News · via CyberScoop
ConnectWise customers hit by supply-chain attack linked to compromised API secret
A portion of ConnectWise’s customers have been adrift for days, and hundreds are compromised, as the company’s efforts to restore its Cloud Backup service remain underway with no confirmed timeline…
News · via Microsoft Security Response Center
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via BleepingComputer
Microsoft: October Windows Server updates break Exchange sign-in, mail flow
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.
News · via Canadian Centre for Cyber Security
Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
Serial Number:AV26-1038 Date: October 13, 2026 As of October 13, 2026, Microsoft is affected by vulnerabilities in the following products: .NET 10.0 .NET 11.0 .NET 8.0 .NET 9.0 ASP.NET Core 10.0…
News · via SANS Internet Storm Center
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was…
News · via Graham Cluley
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China's…
News · via Security Affairs
U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
The U.S. offers $10M for Zhang Yu, accused of helping run HAFNIUM attacks that compromised thousands of organizations worldwide. The U.S. State Department is offering a $10 million reward for…
News · via The Hacker News
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the…
News · via Security Affairs
CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates…
News · via NCSC-NL
NCSC-2026-0401 [1.00] [M/H] Kwetsbaarheid verholpen in Microsoft Exchange Server
Microsoft heeft out-of-band, vooruitlopend op de maandelijkse update voor oktober, een kwetsbaarheid verholpen in Microsoft Exchange Server. De kwetsbaarheid betreft zwakke autorisatiecontroles…
News · via Canadian Centre for Cyber Security
Microsoft security advisory (AV26-1001)
Serial Number: AV26-1001 Date: October 5, 2026 As of October 2, 2026, Microsoft is affected by a vulnerability in the following products: Microsoft Exchange Server 2016 Cumulative Update 23 Prior to…
News · via The Hacker News
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The…
News · via Help Net Security
Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)
Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and…
News · via Microsoft Security Response Center
CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.