Among the latest set of patches released by Microsoft, a fix for CVE-2023-23397 is available to fix an NTLM vulnerability in Outlook for Windows clients. The update closes a hole where attackers can use specially formatted messages to force NTLM credentials to be sent outside the organization.
My team has recently worked on some projects featuring multi-tenant and multi-Exchange environments. A common requirement for all projects is the ability to share free/busy information across all environments. In this article, I will dive into using free/busy sharing with Exchange/Microsoft 365 in the worldwide cloud. Sharing Free/Busy Information Let’s start with the obvious issues: […]
Exchange 2013 support ends on April 11, 2023. After that, Microsoft will not make fixes for security or functionality problems available to customers. It's time to make the decision to upgrade to Exchange 2019 or move to Exchange Online. Most organizations will find that Exchange Online is the right choice. Exchange 2019 is appropriate for organizations that have the right skills, experience, and investment to run a secure Exchange service.
In early December 2022, Rackspace had a major breach in their exchange environment that led to customers' mail data being stolen. This article explains what happened and what can be learned from this incident.
In this week's Practical 365 Podcast, Steve and Paul Discuss new security updates for Exchange Server, what you should do if you are still on Exchange Server 2013, Azure AD Cross Tenant Sync arrives in the roadmap for imminent release, and much more!
Even though Exchange migrations are becoming easier, there are still some things to remember when you plan and perform an upgrade to Exchange 2019. Check out this article for some practical advice on upgrading to Exchange 2019.
In this article, Sean McAvinue explains how to Microsoft Graph PowerShell SDK to Interact with Exchange Online and SharePoint Online.
A Wired article calls Exchange Server a security liability and it's hard to argue the case that the assertion is incorrect. Too many vulnerabilities, too many attacks, and an architecture that's creaking at the seams means that Exchange on-premises is at the end of its days.
Welcome to the first installment of Practical Protection with Paul Robichaux. Paul illustrates four general security principles and talks about how you can practically apply them to your Exchange environment.
The bad news is that Exchange Server has two more day-zero vulnerabilities to cope with. The good is that Microsoft has figured out some mitigations. The ongoing problem remains that attackers like to go after Exchange Server because so many servers are in a poor state of maintenance.
This article explains the importance of deploying Autodiscover correctly to ensure that all of Microsoft 365 works, including Exchange Online.
This week on the Practical 365 podcast, Paul and I are talking about Microsoft Teams and the Hybrid Workplace. Microsoft have released "Hybrid Work Guides for your Business". And, whilst producing brochures for your executives to read about how to improve Hybrid work - Teams Rooms gets some licensing changes - which you'll either love or.. not love so much. Plus, ever wanted a universal translator? Teams delivers...
