Urgent: New Microsoft Exchange Bug Poses ‘Total Domain Compromise’ Risk, CISA Mandates Immediate Patching

Microsoft and the US Cybersecurity and Infrastructure Security Agency (CISA) have issued an urgent warning regarding a critical new high-severity vulnerability in Exchange Server hybrid deployments. Tracked as CVE-2025-53786, this flaw could allow attackers with on-premises administrative access to escalate privileges, potentially leading to a “total domain compromise” across both hybrid cloud and on-premises environments.

While not yet actively exploited, Microsoft deems exploitation “more likely” given its severity. CISA has underscored this urgency, issuing an emergency directive mandating government agencies fix the issue by August 11, 2025, highlighting the immediate threat this poses to organizational security.

The vulnerability stems from how hybrid Exchange deployments authenticate users between on-premises servers and Exchange Online. To mitigate this critical risk, all organizations utilizing Exchange hybrid are strongly advised to immediately install the April Hotfix (or a newer release) on their on-premises Exchange servers. Additionally, users must meticulously follow the configuration instructions outlined in Microsoft’s dedicated Exchange hybrid app guidance and reset the service principal’s keyCredentials.

This alert follows previous high-profile Exchange intrusions and underscores the imperative for immediate action to protect sensitive data and prevent potential widespread security breaches.

阅读中文版 (Read Chinese Version)

Disclaimer: This content is aggregated from public sources online. Please verify information independently. If you believe your rights have been infringed, contact us for removal.