PulseAugur
EN
LIVE 19:38:09

Microsoft Exchange Server hit by active zero-day exploit

By PulseAugur Editorial · [4 sources] ·

Microsoft has confirmed an active zero-day exploit targeting its on-premises Exchange Server, identified as CVE-2026-42897. This vulnerability allows unauthenticated remote code execution and is being actively exploited in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Microsoft is recommending immediate mitigation through its Exchange Emergency Mitigation Service while a formal patch is pending. The exploit, demonstrated at the Pwn2Own Berlin hacking event, poses a significant risk to corporate identity and communications systems. AI

IMPACT This exploit targets enterprise communication infrastructure, potentially impacting business operations and data security, but does not directly involve AI capabilities.

RANK_REASON The cluster reports on a confirmed active zero-day exploit in a widely used enterprise product, with immediate security implications and vendor-recommended emergency mitigations. [lever_c_demoted from significant: ic=4 ai=0.4]

Read on Forbes — Innovation →

AI-generated summary · Google Gemini · from 4 sources. How we write summaries →

Microsoft Exchange Server hit by active zero-day exploit

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Research
The cluster reports on a confirmed active zero-day exploit in a widely used enterprise product, with immediate security implications and vendor-recommended emergency mitigations. [lever_c_demoted f…
Source corroboration
4 independent sources
Strong cross-source corroboration — multiple independent publishers covered this within the clustering window.
Topics
safety, product
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Standard
On-topic for AI-industry coverage; kept in the public index.
Story freshness
145 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [4]

  1. Forbes — Innovation TIER_1 English(EN) · Davey Winder, Senior Contributor ·

    Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation Now

    Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

  2. Forbes — Innovation TIER_1 English(EN) · Davey Winder, Senior Contributor ·

    Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation

    Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

  3. Forbes — Innovation TIER_1 English(EN) · Davey Winder, Senior Contributor ·

    Microsoft Exchange Active 0-Day Exploit—Enable Emergency Mitigation Now

    Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

  4. Forbes — Innovation TIER_1 English(EN) · Davey Winder, Senior Contributor ·

    Microsoft Exchange Zero-Day Hack Confirmed—3 Vulnerabilities Exploited

    Microsoft Exchange has now joined Windows 11 as Pwn2Own zero-day hackers continue to successfully attack the tech giant’s products.

RELATED ENTITIES

RELATED TOPICS