With the first half of 2024 behind us, it’s clear that companies are continuing to prioritize cybersecurity projects to strengthen defenses and enhance operations. In this newsletter, I wanted to share exciting cybersecurity updates from Messageware, as well as important industry news.

Z-Day Guard cybersecurity solution

New Version Available: We are excited to announce that Z-Day Guard now protects all Microsoft Windows and Azure Servers. This extends Z-Day Guard’s protection to all Microsoft Windows Server platforms; including, Exchange, SQL, App Servers, and Azure VMs!

Z-Day Guard is successfully deployed at many Messageware customer sites, providing always-on protection against a wide range of threats. Z-Day Guard can be installed in less than 15 minutes and provides next generation server monitoring for cyber-attacks.

Reach out and Demo Z-Day’s cyber security now

Exchange Server SE Announced

Microsoft announced the next version of on-premises Exchange Server, “Exchange Server SE”. SE is an acronym for subscription edition which is set for release next year / early Q3 2025. SE will be taking the place of Exchange Server 2019 and is expected to maintain code continuity with the upcoming Exchange Server 2019 CU15. Also of note is that Exchange Server CU15 introduces support for Windows Server 2025.

May 2024 – Keylogger Attack on Exchange Servers makes Headlines

A sophisticated keylogger was discovered embedded in the main login page of Microsoft Exchange Servers, stealing account credentials from unsuspecting users across the globe. The malicious code, which also exploited the ProxyShell vulnerability, was found by PT ESC during an incident response operation. The attack affected over 30 companies, including government agencies, banks, IT companies, and educational institutions. Admins are advised to be fully patched with the latest versions of Microsoft Exchange Server (read more here).

Keylogger attacks like this are instantly detected by our cybersecurity solution, Z-Day Guard. We encourage you to take 15 minutes to give Z-Day Guard a try.

Microsoft Incentivizes Management’s Security Focus after being slammed for lax cybersecurity practices

U.S. Department of Homeland Security’s Cyber Safety Review Board completed and published its findings of the Summer 2023 Microsoft 365 Exchange Online Intrusion where Chinese hackers accessed sensitive government officials mailboxes on 365. The report indicated that the hack was preventable and highlighted critical issues within Microsoft’s security culture, including inadequate risk management and a lack of transparency.

In response, Microsoft has announced a new policy that will tie one-third of executive bonuses to their departments’ cybersecurity performance. This decision follows a series of high-profile security breaches, as Microsoft aims to drive a culture change to address the security shortfalls that continue to plague the tech giant. Read more at The Verge

If you are not protecting Exchange Server with Messageware’s cybersecurity products like EPG, Z-Day Guard, and AttachView, then your company is at a higher risk of a data breach. 

As we enter the second half of 2024, I look forward to having an opportunity to work together to enhance your Windows Servers’ cybersecurity.

Best regards,

Mark Rotman
President and CEO Messageware Incorporated