Exchange Server — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
26
occurrences
First Seen
October 29, 2025
Last Seen
August 13, 2026

Exchange Server is Microsoft's on-premises email and collaboration platform used by organizations to manage email, calendars, and contacts.

Overview

Exchange Server is Microsoft's on-premises email and collaboration platform used by organizations to manage email, calendars, and contacts. It provides APIs such as Exchange Web Services (EWS) for programmatic access and integrates with Outlook; its widespread deployment and rich surface area make it a high-value target and subject to rapid changes in authentication, client support, and patch management.

Related Threat Clusters

Recent Intelligence Reports

  • ZDI August 2026 analysis — www.zerodayinitiative.com · August 13, 2026
  • CNBC: Microsoft: Chinese hacking groups were part of SharePoint attacks — www.cnbc.com · August 13, 2026
  • Lazarus Group Exploited Windows Zero — Finance.Biggo · August 12, 2026
  • Exchange Server August 2026 update disables OWA Light and fixes Pwn2Own bug — Feeds.4Sysops · August 12, 2026
  • The July 2026 Security Update Review — www.zerodayinitiative.com · July 30, 2026
  • The July 2026 Security Update Review — Thezdi · July 14, 2026
  • CVE 2023 23397script Doc — aka.ms · June 17, 2026
  • Exploiting Cve 2023 23397 Microsoft Outlook Elevation Of Privilege Vulnerability — www.mdsec.co.uk · June 17, 2026

CVSS v3.1 Breakdown