CISA is giving agencies until 9 a.m. Monday to address a vulnerability that, left unaddressed, could allow hackers to achieve "total domain compromise." ...

To exploit the vulnerability, an attacker has to first gain administrative access to an on-premises Exchange server. From ...

No reported in-the-wild exploits…yet Microsoft and the feds late Wednesday sounded the alarm on another high-severity bug in ...

"In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could ...

CISA and Microsoft have issued advisories for CVE-2025-53786, a high-severity flaw allowing privilege escalation in cloud environments.