To address this problem, we are enabling a transport-based enforcement system in Exchange Online that has three primary functions: reporting, throttling, and blocking. Many customers have taken action to protect their environment, but there are still many Exchange servers that are out of support or significantly behind on updates. We’ve said many times that it is critical for customers to protect their Exchange servers by staying current with updates and by taking other actions to further strengthen the security of their environment. Persistently vulnerable servers significantly increase the risk of security breaches, malware, hacking, data exfiltration, and other attacks. Servers that are unsupported or remain unpatched are persistently vulnerable and cannot be trusted, and therefore email messages sent from them cannot be trusted. Microsoft uses the Zero Trust security model for its cloud services, which requires connecting devices and servers to be provably healthy and managed.
Once a security update is released, malicious actors will reverse-engineer the update to get a better understanding of how to exploit the vulnerability on unpatched servers. There are similar risks associated with running software that is not patched for known vulnerabilities. Once a version of Exchange Server is no longer supported, it no longer receives security updates thus, any vulnerabilities discovered after support has ended don’t get fixed. There are many risks associated with running unsupported or unpatched software, but by far the biggest risk is security. Please join us for upcoming Ask Me anything (AMA) on this subject, starting on at 9am Pacific Time.Īs we continue to enhance the security of our cloud, we are going to address the problem of email sent to Exchange Online from unsupported and unpatched Exchange servers. Due to user error, the original version of this article published on March 23 was deleted.
0 kommentar(er)
