Nearly 22,000 Microsoft Exchange Servers Remain Vulnerable to Authentication Bypass Attacks

According to recent analysis, nearly 22,000 Microsoft Exchange servers remain unpatched and exposed on the internet, leaving them vulnerable to a high-severity authentication bypass flaw. The vulnerability enables attackers to gain unauthorized access to and hijack all user mailboxes on affected systems, bypassing normal authentication mechanisms. Security researchers have identified the scale of exposure through internet scanning, noting that organizations yet to apply Microsoft's security updates remain at risk. The flaw's potential for full mailbox compromise raises concerns about data exfiltration, credential theft, and lateral movement within compromised networks. Microsoft has released patches addressing the vulnerability, but a significant number of servers are reported to remain unpatched, underscoring the ongoing challenge of timely security update deployment in enterprise environments. Security teams are advised to verify patch status and apply the latest Microsoft Exchange security updates to mitigate the risk of exploitation.