#Microsoft Exchange
This archive brings together reporting on vulnerabilities, exploitation campaigns, hardening measures, and incident response tied to enterprise email environments. It focuses on risks affecting organizations across Latin America, from misconfigurations and exposed services to tactics used by criminal groups to gain access and maintain persistence inside corporate networks.
CVE-2026-96940 hits on-prem Exchange Server
Microsoft fixed an authorization flaw in on-prem Exchange Server that could let users read other mailboxes in the same organization.
Oct 6, 2026 · 2 min
FamousSparrow Uses SparroWocky Against Latin America
ESET links a regional spying campaign to FamousSparrow and its new SparroWocky backdoor, with Peru among the targets.
Sep 21, 2026 · 42 min
CVE-2026-62911 Leaves 21,899 Exchange Exposed
A public PoC for CVE-2026-62911 shows an attack chain that can end in RCE and SYSTEM on Exchange, with 21,899 servers still vulnerable.
Sep 3, 2026 · 2 min