CISA and NSA Release Security Guidance for Microsoft Exchange Servers

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have issued new guidance to help organizations secure their on-premises Microsoft Exchange Servers. This advisory follows a high-severity vulnerability (CVE-2025-53786) identified in August and addresses risks associated with misconfigured or outdated installations. The guidance is supported by cybersecurity agencies from Australia and Canada.