Microsoft has started deprecating Basic Auth in Exchange Online starting from today, as it has been warning for years. Customers are encouraged to migrate to Modern Auth (OAuth 2.0).
Microsoft has issued a security notice about two zero-day vulnerabilities with its own Microsoft Exchange Server. Versions 2013, 2016 and 2019 of the software are affected.
Microsoft has confirmed that two recently reported zero-day vulnerabilities in Microsoft Exchange Server 2013, 2016, and 2019 are being exploited in the wild.