Today, CISA issued Emergency Directive (ED) 25-02: Mitigate Microsoft Exchange Vulnerability in response to CVE-2025-53786, a vulnerability in Microsoft Exchange server hybrid deployments.
ED 25-02 directs all Federal Civilian Executive Branch (FCEB) agencies with Microsoft Exchange hybrid environments to implement required mitigations by 9:00 AM EDT on Monday, August 11, 2025.
This vulnerability presents significant risk to all organizations operating Microsoft Exchange hybrid-joined configurations that have not yet implemented the April 2025 patch guidance.
Although this directive is only for FCEB agencies, CISA strongly encourages all organizations to address this vulnerability. For additional details, see CISA’s Alert: Microsoft Releases Guidance on Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments.
CISA released ten Industrial Control Systems (ICS) advisories on August 7, 2025. These advisories provide…
CISA published a Malware Analysis Report (MAR) with analysis and associated detection signatures on files…
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence…
CISA released five Industrial Control Systems (ICS) advisories on July 29, 2025. These advisories provide…
CISA, along with the Federal Bureau of Investigation, Canadian Centre for Cyber Security, Royal Canadian…
CISA released two Industrial Control Systems (ICS) advisories on July 31, 2025. These advisories provide…
This website uses cookies.