Discovering Exchange Servers: Leveling the Field Using Attack Surface IntelligenceRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025VulnerabilityCVE-2021-2685560
Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of CredentialsPalo Alto Unit 42·Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid SetupsThe Hacker News·Aug 8, 04:02 UTC · Aug 8, 2025VulnerabilityCVE-2025-5378660
Microsoft recalls Exchange patch in the last Tuesday UpdateSecurity Affairs·Dec 13, 13:55 UTC · Dec 13, 2014Vulnerability55
Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell)Palo Alto Unit 42·Jun 5, 17:51 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-41040CVE-2022-41082CVE-2021-34473+2 CVEs60
Defending Microsoft Exchange from encrypted attacks with Cisco Secure IPSCisco Talos·Mar 23, 20:50 UTC · Mar 23, 2021VulnerabilityCVE-2021-26855CVE-2021-2706560
CISA, Microsoft warn organizations of high-severity Microsoft Exchange vulnerabilityCyberScoop·Aug 7, 15:36 UTC · Aug 7, 2025Vulnerability in the wildCVE-2025-53786160
CISA recommends immediately patch Exchange ProxyShell flawsSecurity Affairs·Aug 23, 20:22 UTC · Aug 23, 2021Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-3120760
German BSI warns of 17K unpatched Microsoft Exchange serversSecurity Affairs·Mar 30, 08:28 UTC · Mar 30, 2024Vulnerability in the wildCVE-2024-2141060
Patch management is crucial to protect Exchange servers, Microsoft warnsSecurity Affairs·Jan 27, 22:42 UTC · Jan 27, 2023Vulnerability55
29,000 Servers Remain Unpatched Against Microsoft Exchange FlawInfosecurity Magazine·Aug 12, 16:00 UTC · Aug 12, 2025Vulnerability in the wildCVE-2025-5378660
CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zeroSecurity Affairs·May 15, 14:04 UTC · May 15, 2026Vulnerability in the wildCVE-2026-42897CVE-2023-21529160
CISA and partners take action as Microsoft Exchange security risks mountHelp Net Security·Oct 31, 00:00 UTC · Oct 31, 2025Vulnerability55
CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange ServersThe Hacker News·Nov 1, 13:31 UTC · Nov 1, 2025Vulnerability in the wildCVE-2025-59287260
More than 46,000 Exchange servers still unpatchedThe Record·Jan 26, 00:00 UTC · Jan 26, 2023Vulnerability in the wild60
Microsoft vulnerabilities have grave implications for organizations of all sizesHelp Net Security·Dec 10, 00:00 UTC · Dec 10, 2021VulnerabilityCVE-2021-26855CVE-2021-27065CVE-2021-31196+8 CVEs60
Microsoft Patch Tuesday, August 2022 EditionKrebs on Security·Aug 10, 04:32 UTC · Aug 10, 2022VulnerabilityCVE-2022-34713CVE-2022-35743CVE-2022-30134+5 CVEs160
CVE-2022-41040 and CVE-2022-41082 – zeroKaspersky Securelist·Dec 19, 16:07 UTC · Dec 19, 2022VulnerabilityCVE-2022-41040CVE-2022-41082CVE-2021-34473+2 CVEs60
Two Microsoft Exchange zero-days exploited by attackers (CVE-2022-41040, CVE-2022-41082)Help Net Security·Oct 3, 10:39 UTC · Oct 3, 2022VulnerabilityCVE-2022-41040CVE-2022-4108260
Threat Advisory: Microsoft warns of actively exploited vulnerabilities in Exchange ServerCisco Talos·Sep 30, 21:16 UTC · Sep 30, 2022Vulnerability in the wildCVE-2022-41040CVE-2022-4108260
92% of worldwide Microsoft Exchange IPs are now patched or mitigatedSecurity Affairs·Mar 24, 07:57 UTC · Mar 24, 2021Vulnerability in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange ServersRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2018Vulnerability in the wildCVE-2021-26855CVE-2021-27065CVE-2021-26857+1 CVEs60
November 2025 Patch Tuesday forecast: Windows Exchange Server EOL?Help Net Security·Nov 12, 11:13 UTC · Nov 12, 2025Vulnerability in the wildCVE-2025-62215CVE-2025-59287160
NSA Discovers New Vulnerabilities Affecting Microsoft Exchange ServersThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2021Vulnerability in the wildCVE-2021-28310CVE-2021-1732CVE-2021-28480+6 CVEs60
NSA says it found new critical vulnerabilities in Microsoft Exchange ServerCyberScoop·Apr 13, 19:37 UTC · Apr 13, 2021Vulnerability in the wild60
62,000 Microsoft Exchange Servers potentially left unpatchedSecurity Affairs·Mar 25, 18:03 UTC · Mar 25, 2021Vulnerability in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
ProcessUnity accelerates third-party assessmentsHelp Net Security·Feb 20, 09:10 UTC · Feb 20, 2025Vulnerability55
ProxyToken vulnerability can modify Exchange server configsThe Record·Dec 15, 00:00 UTC · Dec 15, 2022VulnerabilityCVE-2021-3376660
Unpatched Microsoft Exchange ZeroSecurity Affairs·Sep 30, 07:25 UTC · Sep 30, 2022Vulnerability in the wild60
Amid widespread Exchange Server attacks, Microsoft issues patch for older versionsCyberScoop·Mar 9, 14:55 UTC · Mar 9, 2021Vulnerability in the wild60
October 2025 Patch Tuesday forecast: The end of a decade with MicrosoftHelp Net Security·Oct 10, 00:00 UTC · Oct 10, 2025VulnerabilityCVE-2025-43400CVE-2025-1058560
Microsoft Fixes New Year’s Day Exchange Server BugInfosecurity Magazine·Jan 4, 09:21 UTC · Jan 4, 2022VulnerabilityCVE-2021-4483260
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0The Hacker News·Nov 10, 06:24 UTC · Nov 10, 2021Vulnerability in the wildCVE-2021-42321CVE-2021-42292CVE-2021-43208+16 CVEs160
Microsoft Patch Tuesday follows SharePoint attacks, Exchange server warningsCyberScoop·Aug 12, 20:21 UTC · Aug 12, 2025Vulnerability in the wildCVE-2025-53786CVE-2025-53770CVE-2025-53771+8 CVEs60
Microsoft Patch Tuesday for January 2023 fixed actively exploited zeroSecurity Affairs·Jan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674CVE-2023-21549CVE-2023-21561+58 CVEs160
October 2022 Patch Tuesday forecast: Looking for treats, not more tricksHelp Net Security·Oct 11, 04:37 UTC · Oct 11, 2022VulnerabilityCVE-2022-41040CVE-2022-41082160
WARNING: New Unpatched Microsoft Exchange ZeroThe Hacker News·Oct 3, 08:22 UTC · Oct 3, 2022Vulnerability in the wild160
Hackers seize severe Microsoft Exchange vulnerabilities in echo of widespread March attacksCyberScoop·Aug 23, 16:41 UTC · Aug 23, 2021Vulnerability in the wild60
March 2021 Patch Tuesday forecast: Off to an early startHelp Net Security·Jun 8, 18:28 UTC · Jun 8, 2021VulnerabilityCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60