Exchange 2016

Exchange and the Turla LightNeuron Attack

by Tony Redmond

Turla, a Russian cyber-espionage group is reported as being behind an attack on Exchange on-premises servers that uses transport agents to capture and process messages for selected users. It's an attack vector that hasn't been seen before and raises the question of how often administrators should review transport agents active on their servers. The important point is that unless your network is compromised, hackers cannot install transport agents on Exchange servers and this attack is more theoretical than practical.

Stick or Stay: Should I Upgrade to Exchange 2019?

with 1 Comment by Tony Redmond

Exchange 2019 has been around for six months. It's a good time to consider if on-premises organizations should upgrade or stick with the version of Exchange they run today. Exchange 2019 is a solid release, even if Microsoft's engineering efforts are largely focused on the cloud these days. Of course, moving to Exchange Online is an option too, but perhaps not for the dedicated on-premises deployments.

Exchange Privilege Elevation Vulnerability Addressed by Microsoft Patches

with 3 Comments by Tony Redmond

The recent exposure of a privilege elevation vulnerability that exists in the control Exchange has over Active Directory and EWS push notifications is fixed by cumulative updates for Exchange 2013, Exchange 2016, and Exchange 2019 and a roll-up update for Exchange 2010 SP3. These changes mark an architectural modification for Exchange, something that Microsoft is loathe to do outside major releases. Install the updates now!

Petri Newsletter Sign-up
Tech Tuesday

Subscribe to Tech Tuesday, the latest insights from Petri.com for IT Pros.

    See All Petri Newsletters

    Updates Released for Exchange 2016 and Exchange 2013

    by Tony Redmond

    With all the focus and attention paid to Office 365, you’d be forgiven for assuming that not much happens in the world of on-premises software. Microsoft will support Exchange 2016 until 2025 and has to maintain the software through patches and updates until then. Exchange 2013 isn’t forgotten either. New cumulative updates are available for the two servers. Cue excitement all round.