CISA Issues Emergency Directive: Patch Critical Microsoft Exchange Flaw by August 11 or Risk Cloud Compromise
CISA Issues Emergency Directive: Patch Critical Microsoft Exchange Flaw by August 11 or Risk Cloud Compromise The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent emergency directive (ED 25-02) on August 7, 2025, mandating that Federal Civilian Executive Branch (FCEB) agencies immediately address a high-severity security flaw in Microsoft Exchange Server. Agencies operating Microsoft Exchange hybrid environments must implement required mitigations by 9 a.m. EDT on Monday, August 11, 2025, to prevent potential compromise of their cloud…