home.social

#exchangeonline — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #exchangeonline, aggregated by home.social.

  1. Microsoft to Discontinue Legacy TLS Versions in Exchange Online by July 2026

    Microsoft is putting the brakes on outdated security protocols, announcing that it'll start blocking legacy TLS 1.0 and 1.1 connections to Exchange Online in July 2026 - so it's time to upgrade and stay secure! This move marks the end of an era for older clients that still rely on these outdated protocols.

    osintsights.com/microsoft-to-d

    #ExchangeOnline #TransportLayerSecurity #Tls10 #Tls11 #Microsoft

  2. Microsoft Phases Out Legacy TLS in Exchange Online

    Microsoft is phasing out support for outdated TLS versions (TLS 1.0 and TLS 1.1) for POP3 and IMAP4 connections to Exchange Online, starting July 2026, to boost security. From then on, only TLS 1.2 or later will be accepted, making older connections obsolete.

    osintsights.com/microsoft-phas

    #TransportLayerSecurity #LegacyTlsDeprecation #ExchangeOnline #Microsoft #Tls10

  3. Eigentlich hatte ich 13Uhr meinen Feierabend geplant.
    Jetzt, 3,5 Überstunden später, ist endlich Schicht. Grund? Das jährliche Hochamt der Microsoft-Lizenzierung. Ein Quell ewiger Freude!
    Kosten drücken, Lizenzen jonglieren und beten, dass am Ende niemandem die Funktionalität wegstirbt oder das Kartenhaus kollabiert. Einmal im Jahr immer wieder diese zeitschindende Aufgabe. Wer übernimmt das für mich nächstes Jahr?
    #Microsoft #LicensingHell #SysAdmin #AdminLife #ExchangeOnline #IT #Überstunden

  4. 𝐇𝐨𝐰 𝐭𝐨 𝐠𝐞𝐭 𝐮𝐧𝐥𝐢𝐦𝐢𝐭𝐞𝐝 𝐦𝐚𝐢𝐥𝐛𝐨𝐱 𝐬𝐢𝐳𝐞 𝐢𝐧 𝐄𝐱𝐜𝐡𝐚𝐧𝐠𝐞 𝐎𝐧𝐥𝐢𝐧𝐞

    Exchange Online Plan 1 licenses generally have a primary mailbox capacity of 50 GB. Exchange Online Plan 2 licenses have a capacity of 100 GB. However, this capacity can be extended by using Online Archive. With Exchange Online Plan 2, this capacity is unlimited. Technically speaking, the capacity is limited to 1.5 TB.

    An interesting fact is that Microsoft 365 Business Premium licenses, which by default include Exchange Online Plan 1, are also entitled to this feature.

    cswrld.com/2026/01/how-to-enab

    #cswrld #exchangeonline #mailbox #archive

  5. 𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗰 𝗲𝗺𝗮𝗶𝗹 𝗳𝗼𝗿𝘄𝗮𝗿𝗱𝗶𝗻𝗴 𝗶𝗻 𝗢𝗳𝗳𝗶𝗰𝗲 𝟯𝟲𝟱

    Automatic email forwarding is very risky. First, it can lead to exfiltration of sensitive internal information outside the corporate environment. But it can also cause account compromise, for example through password reset whose code arrives at some external address that may be under the control of an attacker.

    📺 Watch my YouTube video bellow 👇 👇
    youtu.be/sdjG-gl6Xxs

    #cswrld #videotutorial #email #forwarding #office365 #exchangeonline

  6. 𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝘀𝗽𝗲𝗰𝗶𝗳𝗶𝗰 𝗳𝗶𝗹𝗲 𝘁𝘆𝗽𝗲𝘀 𝗶𝗻 𝗲𝗺𝗮𝗶𝗹 𝗮𝘁𝘁𝗮𝗰𝗵𝗺𝗲𝗻𝘁𝘀

    A very common source of infection is email. Everyone uses email and threat actors take advantage of it. Either in the form of phishing or in the form of malicious attachments.

    There are very advanced protection options within Office 365. Whether it be within Exchange Online Protection, which is included in all Office 365 / Exchange Online plans, or within Safe Attachments, which is an extension within Microsoft Defender for Office 365.

    But a very effective protection is the very simple blocking of unwanted file types within email attachments. You simply block what is unwanted, making it very easy and effective to block many potentially malicious files.

    📺 Watch my YouTube video bellow 👇 👇
    youtu.be/dFlD_CH5Kp8

    #cswrld #videotutorial #email #attachments #filter #office365 #exchangeonline

  7. Automatic email forwarding to external domains is very risky. First, it can lead to exfiltration of sensitive internal information outside the corporate environment. But it can also cause account compromise, for example through password reset whose code arrives at some external address that may be under the control of an attacker.

    How to block automatic external email forwarding? Read my today's blog post 👇👇

    cswrld.com/2024/10/how-to-bloc

    #exchangeonline #emailforwarding #automaticemailforwarding #office365 #block

  8. Inbound SMTP DANE (DNS-Based Authentication of Named Entities) is a security protocol designed to secure email communication by ensuring the authenticity of the receiving mail server’s encryption certificates when emails are delivered via the Simple Mail Transfer Protocol (SMTP).

    By default, SMTP doesn’t guarantee encryption, which makes it vulnerable to man-in-the-middle attacks. To secure email communication, SMTP can use STARTTLS, which upgrades a plain text connection to an encrypted one. However, STARTTLS by itself doesn’t verify the authenticity of the receiving mail server’s certificate, leaving it vulnerable to attacks where a malicious entity might impersonate the server.

    DANE addresses this issue by enabling domain owners to publish their mail server’s encryption certificates in DNS records, which are protected by DNSSEC (Domain Name System Security Extensions). This allows sending mail servers to verify the authenticity of the receiving mail server’s certificate before establishing an encrypted connection.

    When an email is received, the receiving mail server uses DANE to publish its certificate in the DNS, allowing the sending server to check the certificate’s validity before establishing a secure TLS connection. This ensures that emails are delivered over an encrypted connection and that the encryption certificate is trustworthy and has not been tampered with.

    cswrld.com/2024/09/how-to-turn

    #smtp #dane #inbound #office365 #exchangeonline #dnssec #cswrld

  9. SMTP MTA Strict Transport Security (MTA-STS) is a relatively young protocol that allows you to signal the use of trusted certificates when encrypting electronic mail during SMTP transmission.

    The transmission of electronic mail uses so-called opportunistic encryption. The client side connects to the server, notifies the server of its intention to encrypt the communication using STARTTLS and establishes an anonymous TLS connection, i.e. without authenticating the identity of the counterparty. If anything goes wrong at the beginning of the communication, the client switches to the backup plan and the mail is transmitted unencrypted.

    The RFC even explicitly states that encryption must not be enforced for the sake of interoperability between servers. That is the reason why we have MTA-STS that is somewhat similar to HSTS in the HTTPS world. And Exchange Online in Office 365 supports MTA-STS for incoming and also outgoing emails. It just needs to be configured.

    Learn how to configure MTA-STS for Office 365 from my today's blog post cswrld.com/2024/04/how-to-enab

    #mtasts #smtp #email #office365 #exchangeonline #cybersecurity #tips

  10. Today's update adds two long-awaited features to our #CalendarSynchronization service:

    - ChronoLink now supports setting event #reminders for #GoogleCalendar or Microsoft #Outlook.com / #ExchangeOnline.
    - Added ability to write #OutOfOffice events to Google, which is useful for managing vacations or holidays.

    More details: headwayapp.co/chronolink-news/

    Join our free public beta, no strings attached!
    chronolink.app/

    #IndieDev #IndieApps #Calendar

  11. Today's update to the ChronoLink #CalendarSynchronization service:

    - Added support for writing to #Clockodo. This allows users to automatically create time entries based on #GoogleCalendar, #Outlook.com / #ExchangeOnline, #Jira worklogs or #iCalendar URLs.
    - Improved formatting of calendar event descriptions generated from Jira worklogs.

    More details: headwayapp.co/chronolink-news/

    Join our public beta, no strings attached!
    chronolink.app/

    #IndieDev #IndieApps #Calendar

  12. Today's update to the ChronoLink #CalendarSynchronization service:

    - When reading the "Location" field from an MS calendar, values like "Teams" no longer turn into "Teams (, )".

    - Fixed a bug that prevented ChronoLink from clearing the "Location" field of events in an MS calendar that were created by earlier runs.

    More details: headwayapp.co/chronolink-news/

    In other news, our FAQ now mentions our Q1 2024 launch date: chronolink.app/beta-faq/#when-

    #IndieDev #IndieApps #Calendar #Outlook #ExchangeOnline

  13. New Mastodon server, new #Introduction:

    ChronoLink is a #CalendarSynchronization service for any number of #GoogleCalendar and #Outlook.com / #ExchangeOnline accounts that continuously copies & transforms events according to your rules. Also supports #iCalendar (ICS), Atlassian #Jira and #Clockodo.

    Free during the beta & afterwards; premium plan will be ~ 1€/month.

    Oh, and we ❤️ privacy & are #GDPR compliant. Hosted in 🇪🇺 , available 🌐.

    Read more at chronolink.app/

    #IndieDev

  14. The implication of the #Microsoft365 #hack goes deeper than just affecting #ExchangeOnline. Researchers from #WizResearch notes that the implication of the stolen #MSA keys could have allowed the attacker to:

    forge access tokens for multiple types of Azure Active Directory applications, including every application that supports personal account authentication, such as SharePoint, Teams, OneDrive, customers’ applications that support the “login with Microsoft” functionality, and multi-tenant applications in certain conditions.
    #infosec #cybersecurity #databreach #dataloss #cloudsecurity

    https://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micr

  15. Microsoft 365 Exchange Online Domain Transfers: Validation Phase Part I

    In this edition of our series on the “Top 5 Best Practices for Exchange Online Domain Transfers,” we delve deeper into the importance of validating your plan prior to implementation. As the third phase of a Microsoft 365 Exchange Online migration project, validation follows the strategizing phase.

    More:bit.ly/43nOFih

    #Microsoft365 #Practical365 #ExchangeOnline #DomainTransfer

  16. Migrating Exchange Online Mail Contacts to Azure AD Guest Accounts

    ▶️Are Azure AD Guest Accounts the Better Option?
    ▶️Finding Contact Data
    ▶️Creating Azure AD Guest Accounts
    ▶️Updating Distribution Lists With Azure AD Guest Accounts
    ▶️Contact Clean Up
    ▶️Maintenance and Care of Guest Accounts
    ▶️Moving to Guest Accounts

    bit.ly/3KVSq7d

    #Microsoft365 #ExchangeOnline #AzureAD #Practical365

  17. Microsoft hat die Anmeldung mittels Basic Auth für Exchange Online weitgehend abgedreht. Angreifer versuchen, bei Ausnahmen mit Passwort-Austesten einzubrechen.
    Exchange Online: Nach Basic-Auth-Ende vermehrte Angriffe beobachtet