![\"Microsoft](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/08\/1754560388_711_960x0.jpg\")
<\/p>\n<\/p>\n
CISA issues Microsoft Exchange Server CVE-2025-53786 warning<\/p>\n
Getty Images<\/p>\n
Hot on the heels of an official security advisory from America\u2019s Cyber Defense Agency<\/a> warning of camera hack attacks<\/a>, the U.S. Cybersecurity and Infrastructure Security Agency has issued another alert. This time, it impacts users of Microsoft Exchange Server and, without immediate remediation, could enable an attacker to escalate privileges and \u201cimpact the identity integrity of an organization\u2019s Exchange Online service.\u201d Here\u2019s what you need to know.<\/p>\n ForbesGoogle Confirms It Has Been Hacked \u2014 User Data StolenBy Davey Winder<\/a> There have been a number of security warnings impacting Microsoft users of late that may have caught your attention: the Windows JPEG hackers<\/a> and, of course, the by now infamous SharePoint Server attacks<\/a> to name but two. The very latest, however, comes with the added weight of a CISA alert attached.<\/p>\n \u201cCISA is aware of the newly disclosed high-severity vulnerability, CVE-2025-53786,\u201d the August 6 advisory<\/a> warned, \u201cthat allows a cyber threat actor with administrative access to an on-premise Microsoft Exchange server to escalate privileges by exploiting vulnerable hybrid-joined configurations.\u201d<\/p>\n Microsoft, meanwhile, has said<\/a> that \u201cstarting in August 2025, we will begin temporarily blocking Exchange Web Services traffic using the Exchange Online shared service principal,\u201d as part of a \u201cphased strategy to speed up customer adoption of the dedicated Exchange hybrid app and making our customers\u2019 environments more secure.\u201d<\/p>\n CISA added that it \u201chighly recommends entities disconnect public-facing versions of Exchange Server or SharePoint Server that have reached their end-of-life (EOL) or end-of-service from the internet.\u201d<\/p>\n Although CISA confirmed that there has not been any observed active exploitation of CVE-2025-53786, it strongly urged organizations to follow the Microsoft guidance on this issue.<\/p>\n
\nCISA And Microsoft Warn Users Of CVE-2025-53786 Attack Danger<\/p>\n