#microsoftexchange

Technical analysis of CVE-2026-62911, a Microsoft Exchange Server privilege escalation flaw.

Technical analysis of CVE-2026-62911, a Microsoft Exchange Server privilege escalation flaw.

Measured HTTP exposure of Microsoft Exchange Server, compared with reported counts of unpatched hosts.

CVE-2026-42897 is a CVSS 8.1 reflected XSS zero-day in Exchange OWA actively exploited in the wild. On-prem Exchange 2016, 2019, and SE are affected. Here's what defenders need to do now.

Learn how to successfully migrate to Exchange 2013 with practical tips and essential steps for a smooth transition.

Learn to design and deploy Microsoft Exchange Server 2016 with practical tips and best practices.

Learn how to effectively administer Microsoft Exchange Server 2016 with practical tips and insights.

Explore the core solutions of Microsoft Exchange Server 2013 and practical tips to enhance your email management.

Attackers exploit a zero-day in Microsoft Exchange Server using crafted emails, exposing on-premises servers to serious security risks without a perma

Pwn2Own Berlin 2026 handed out $908K for 39 zero-day exploits, spotlighting major security flaws in Microsoft Exchange and Windows 11.

This blog post describes the details of my Powershell script that uses Powershell and the Microsoft EWS Managed API to download attachments from outlook works. I call it, not so cleverly, EWSEmailAttachmentSaver.