--- title: Exchange Server Vulnerabilities date: 2024-09-23T05:10:00-07:00 author: admin canonical_url: "https://www.cryoserver.com/blog/exchange-server-vulnerabilities" section: Blog --- ![Exchange Server Vulnerabilities](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1562813733-b31f71025d54-cropentropycstinysrgbfitmaxfmjpgixidMnwxMTc3M3wwfDF8c2VhcmNofDR8fGhhY2tlcnxlbnwwfHx8fDE2MTU5ODA4MTAixlibrb-1.2.1q80w2000.jpg?w=1920&h=1080&q=100&fm=webp&fit=clip&dm=1727093417&s=64d226779e09b99e3a396a262681b39b) Sep 23, 2024# Exchange Server Vulnerabilities ### Urgent NCSC notice: protect your Exchange Servers You may already know about the four zero-day vulnerabilities in Microsoft Exchange Servers. They’ve been in and out of the news since early January. What we’re [now learning ](https://www.zdnet.com/article/everything-you-need-to-know-about-microsoft-exchange-server-hack/)is that a state-sponsored threat group from China is actively exploiting the vulnerabilities, and other cyber attackers have adopted them in widespread attacks. It’s reported that hackers are exploiting them to drop ransomware. The UK’s National Cyber Security Centre (NCSC) believes that over 3,000 Microsoft Exchange email servers used by UK organisations haven't had the critical security patches applied and therefore remain at risk from cyber attackers who want to take advantage of the vulnerabilities. Apparently,[ tens of thousands of organisations](https://www.zdnet.com/article/microsoft-exchange-server-zero-day-attacks-malicious-software-found-on-2300-machines-in-uk/) around the world have had their email servers compromised by the cyber attacks targeting Microsoft Exchange, potentially putting large amounts of sensitive information into the hands of hackers. **Are your servers affected?** The affected Exchange Server versions are: - Microsoft Exchange Server 2013 - Microsoft Exchange Server 2016 - Microsoft Exchange Server 2019 If you use any of these in your business, the UK’s National Cyber Security Centre (NCSC) advises that you take action immediately to install the latest updates. **What to do** To identify whether your Exchange Server has been compromised with security scripts, check here:[ GitHub](https://hs-5285088.t.hubspotfree-h2.net/e2t/tc/VWGk2N4QylX3W3xRLmG5LVHXGW6YVQGc4pd9SdN3cFw5Z3lGn5V1-WJV7CgH3HW5J0JnR4Xt-n8W1DXDBJ26r5xZW4Tq3Ph37lQ4RW465hRx8fRrBpW12X63j1291-JW3B-Jwq1c6gJxW6PYDp56nBt4NW47q4sd2MBXGBW1y7NRc4fmpp9W91g9YQ3XVSC_W7XJhpN3gvnDPW7VSqJ-7pSk9zW93NV3C28CYn5W766pn5917GrNW4xBgj-5M01pyW42dBqn8lVjDVW8wx7nN2R93_JV3cVJW8gn5lCW4D_f7N4dm28LW5K0gsD4_JJv6W7FMxKK2p-0tSW9kw63G73F7gyW94ynXW2Yc-stV3SG9j295xVF3dTr1) If your organisation runs an out-of-support version of Exchange Server, NCSC recommends updating to a supported version without delay. It also advises you to report any suspected compromises[ on its website](https://report.ncsc.gov.uk/). Read more: - [The NCSC’s full news report on Exchange Server vulnerabilities](https://www.ncsc.gov.uk/news/advice-following-microsoft-vulnerabilities-exploitation) - [Microsoft Exchange Server zero-day attacks: Malicious software found on 2,300 machines in the UK](https://www.zdnet.com/article/microsoft-exchange-server-zero-day-attacks-malicious-software-found-on-2300-machines-in-uk/) - [White House warns organizations have 'hours, not days' to fix vulnerabilities as Microsoft Exchange attacks increase](https://edition.cnn.com/2021/03/12/politics/microsoft-solarwinds-biden-administration/index.html) - [At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software](https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/) - [Microsoft releases one-click mitigation tool for Exchange Server hacks](https://www.zdnet.com/article/microsoft-releases-one-click-mitigation-tool-for-exchange-server-hacks/) ## Read *More* [ ![Email Archiving vs Backup: What's the Difference?](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1527474305487-b87b222841cc-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=100&fm=webp&fit=crop&dm=1727093382&s=bd66c11cb69b6c3eb0dd90def8b35c59) Sep 23, 2024## Email Archiving vs Backup: What's the Difference? ### It’s important to know the difference between an email archive and email backup because many still… ](https://www.cryoserver.com/blog/email-archiving-vs-backup-whats-the-difference "Go to Story") [ ![What has been the impact of GDPR on Cryoserver customers?](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1523484489927-4aa8bf9a99d8-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=100&fm=webp&fit=crop&dm=1727093344&s=4e9c0815ebf945b687b10f37d9cff869) Sep 23, 2024## What has been the impact of GDPR on Cryoserver customers? ### Market responses to GDPR Leading up to and post GDPR, we have seen many of our Cryoserver email… ](https://www.cryoserver.com/blog/what-has-been-the-impact-of-gdpr-on-cryoserver-customers "Go to Story") [ ![POPIA and Email Data: How to Comply Affordably](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1423592707957-3b212afa6733-cropentropycstinysrgbfitmaxfmjpgixidMnwxMTc3M3wwfDF8c2VhcmNofDZ8fGxhd3xlbnwwfHx8fDE2MjkxMDczMjIixlibrb-1.2.1q80w2000.jpg?w=1024&h=512&q=100&fm=webp&fit=crop&dm=1727093432&s=b71c8ac7e986590c7413504e827ccbea) Sep 23, 2024## POPIA and Email Data: How to Comply Affordably ### If your business is based in South Africa, here’s what you need to know about the Protection of… ](https://www.cryoserver.com/blog/popia-and-email-data-how-to-comply-affordably "Go to Story") [ ![How to Migrate to Office 365](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1570581422215-69dcae5c6733-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=100&fm=webp&fit=crop&dm=1727093402&s=4fae7c2a9d508d42d22e5976e6c3dd44) Sep 23, 2024## How to Migrate to Office 365 ### Planning to migrate your email to Microsoft 365/Office 365?Here are the standard steps - plus a big… ](https://www.cryoserver.com/blog/how-to-migrate-to-office-365 "Go to Story") [ ![How to Archive in Outlook](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1593642532973-d31b6557fa68-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=100&fm=webp&fit=crop&dm=1727093401&s=2dfc29faf860364eeedf48f10da12793) Sep 23, 2024## How to Archive in Outlook ### Want to free up space on your mail server? First you’ll need to archive Outlook emails. Here’s the… ](https://www.cryoserver.com/blog/how-to-archive-in-outlook "Go to Story") [ ![The Benefits of Archiving Emails](https://cynical-zorilla.transforms.svdcdn.com/production/photo-1526314114033-349ef6f72220-ixlibrb-1.2.1q80fmjpgcropentropycstinysrgbw2000fitmaxixideyJhcHBfaWQiOjExNzczfQ.jpg?w=1024&h=512&q=100&fm=webp&fit=crop&dm=1727093337&s=9a9db80818957aea2b6c10ae8d34151f) Sep 23, 2024## The Benefits of Archiving Emails ### There were more than 281 billion consumer and business emails sent per day in 2018, and this figure… ](https://www.cryoserver.com/blog/the-benefits-of-archiving-emails "Go to Story")