18 May 2026 - 07:41
Category: IT Fail
Exchange Server is broken. Again.
On-premises Exchange is currently inviting unauthenticated strangers to run remote code via the medium of bad emails. Opening an email has never been more of a high-stakes gamble.
Source: forbes.com
The Full Story
Microsoft and CISA are practically begging us to fix CVE-2026-42897 before the entire internet moves into our local Exchange 2016 and 2019 servers. This affects every organization still clinging to the dream of hosting their own email infrastructure instead of outsourcing the headache. Protection involves implementing emergency mitigations immediately, assuming your IT team hasn't already resigned to live as goat farmers in the Outer Hebrides.
#exchangewoe
#emailhell