CVE-2025-58107

In Microsoft Exchange versions through 2019 (prior to 2020), a vulnerability exists in the Exchange ActiveSync (EAS) configuration on on-premises servers. This flaw allows sensitive data from Samsung mobile devices to be transmitted in cleartext . Exposed information may include the user's name, ...

Microsoft Releases Exchange On-premises Mitigation Tool

Microsoft has released the Exchange On-premises Mitigation Tool EOMT.ps1 that can automate portions of both the detection and patching process. Microsoft stated the following along with the release: "the tool is intended to help customers who do not have dedicated security or IT teams to apply...

ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI on Wednesday issued a joint advisory warning of active exploitation of vulnerabilities in Microsoft Exchange on-premises products by nation-state actors and cybercriminals. "CISA and FBI...