A few months back, Microsoft added the ability to get and set extended properties on Tasks in the Graph Beta endpoint.

Microsoft recently published advice on what to do when an EWS application stops working. This post will look more in depth at what actually happens to applications once EWS is disabled

The post covers one of the more complex areas of any EWS migration searching and filtering. In part 1 we will look at the process of Filtering and Search and look at how to migrate EWS SearchFilters a...

Nach der Installation der Oktober-Updates für Windows Server kommt es auf Exchange-Servern zu Ausfällen. Microsoft untersucht das Problem.

Windows Updates Can Stall Exchange, Plus 4 Stories https://raymondtec.com/2026/10/windows-updates-stall-exchange-plus-4-stories/?utm_source=mastodon&utm_medium=social&utm_campaign=daily_briefOctober Windows Server updates can disrupt on-premises Exchange mail flow. Plus a BeyondTrust zero-day, court notices, Microsoft lock-in, and Android scams.#TechNews #Android #BankruptcyCourts #BeyondTrust #CVE2026102764 #GoogleMessages #MicrosoftExchange

Microsoft has issued an emergency security update to fix a vulnerability in Exchange Server that could expose confidential organizational communications. The flaw, tracked as CVE-2026-96940, has received a CVSS severity score of 8.8 out of 10. Reported by TechRadar, the vulnerability could allow attackers who already have valid login credentials to increase their privileges within Exchange and access mailboxes belonging to other users. Microsoft released the fix on October 2, ahead of its originally intended schedule. About the flaw The security issue stems from a weakness in authorization controls, which determine what information a user can access. By exploiting the flaw over a network, an authenticated attacker could gain permissions beyond those assigned to their account. Threat actors could first obtain credentials through phishing attacks or by purchasing stolen login details from underground online markets. Once inside an organization’s Exchange environment, they could exploit the vulnerability to read emails and attachments belonging to other employees. However, the flaw does not provide unrestricted access across different customer environments, known as tenants. It also does not directly grant administrator-level or SYSTEM-level privileges on the underlying Windows server. What happens in case of successful exploitation? Successful exploitation could expose sensitive business information, including financial records, invoices, contracts, customer correspondence, internal discussions, and confidential documents. Attackers could use the stolen information to support further cyberattacks. For example, they might impersonate company employees, send convincing fraudulent emails, or conduct business email compromise (BEC) scams to trick organizations into transferring money or disclosing additional information. The vulnerability is particularly problematic because an ordinary employee’s compromised account could potentially provide an entry point for accessing information held in other employees’ mailboxes. Affected products The vulnerability affects the following on-premises products: * Microsoft Exchange Server Subscription Edition RTM * Microsoft Exchange Server 2016 Cumulative Update 23 * Microsoft Exchange Server 2019 Cumulative Updates 14 and 15 Microsoft has confirmed that Exchange Online customers are protected by a server-side fix. Organizations running affected on-premises installations should install the appropriate security updates promptly. Exchange Server 2016 and 2019 have reached the end of their standard support lifecycle. Eligible organizations must be enrolled in Microsoft’s Extended Security Update programme to receive the relevant updates for these versions. Microsoft recommends that organizations without the required coverage migrate to Exchange Server Subscription Edition. Microsoft’s response  Microsoft reported no evidence that the vulnerability was being actively exploited at the time of the report. However, the company assessed that exploitation was more likely, making timely patching important. Administrators should run Microsoft’s Exchange Server Health Checker after installing the update to verify successful deployment and identify any additional actions required.

Zum Wochenende hat Microsoft weitere Exchange-Updates nachgelegt. Sie stopfen eine Rechteausweitungslücke.

products in order to stay safe read more about Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft patches CVE-2026-96940, which lets authenticated attackers read other users' Exchange mailboxes within the same organization.

Microsoft released out-of-band Exchange Server security update that fixes a high-severity mailbox access vulnerability (CVE-2026-96940).

Microsoft has issued out-of-band updates for CVE-2026-96940, a high-severity Microsoft Exchange Server flaw that could let an authenticated attacker escalate privileges and access other users’ mailboxes within the same organization. Exchange Online has already received a service-side fix, while on-premises users of affected Exchange Server versions should patch immediately; Microsoft also...

Microsoft has begun disabling Exchange Web Services by default in Exchange Online, impacting native macOS Mail sync for Microsoft 365 users.

Kaspersky GERT reported that NightEagle (APT-Q-95) expanded its operations from Asia to Russian businesses, using stolen VPN credentials, GhostContainer on Microsoft Exchange, and multiple tunneling and lateral-movement techniques. The campaign also involved BlueKeep exploitation, DCSync-related activity, and tooling hosted under disguised GitHub repositories to maintain access and move across internal networks. #NightEagle #APTQ95 #GhostContainer #MicrosoftExchange #BlueKeep #DCSync

Microsoft is raising minimum version requirements in September to throttle and block emails sent from outdated Exchange servers.

📰 Source : LeMagIT — Article publié le 26 août 2026, relatant une vulnérabilité Exchange divulguée lors du Patch Tuesday de Microsoft du 11 août 2026. 🔍 Contexte : Le Patch Tuesday d'août 2026 de Microsoft est décrit comme le plus volumineux à ce jour, couvrant 421 vulnérabilités, dont 7 affectant Microsoft Exchange.

Corporate email can fall into an attacker's hands after the compromise of a single low-privilege account. Nearly 22,000 internet-facing Microsoft Exchange servers have not received the fix for CVE-2026-62911, a flaw that allows every employee's mailbox to be seized. An Authentication Bypass by Capture-Replay Microsoft rated the vulnerability 8.0 out of 10 on the CVSS 3.1 scale and classified it as an authentication bypass by capture-replay.

Nearly 22,000 Microsoft Exchange servers are still unpatched against CVE-2026-62911, a critical authentication bypass flaw that can let an authorized attacker elevate privileges over the network. The United States and Germany have the highest numbers of vulnerable servers, while NCSC-NL and BSI have urged immediate patching as a working exploit is reportedly circulating online. #CVE-2026-62911 #MicrosoftExchangeServer #NCSC-NL #BSI #OrangeTsai #DEVCOREResearchTeam #TrendMicroZeroDayInitiative

A public PoC is available for Microsoft Exchange CVE-2026-62911 while nearly 22,000 Internet-facing Exchange servers remain vulnerable.