Microsoft to stop Exchange 2016 / 2019 security updates in October
Summary
Microsoft has announced that it will cease providing security updates for Exchange 2016 and 2019 in October, even under the Extended Security Update (ESU) program. This means that organizations still using these older versions will no longer receive critical patches for newly discovered vulnerabilities.
IFF Assessment
FOE
The end of security updates for older versions of Exchange leaves organizations vulnerable to new threats and exploits.
Defender Context
Organizations relying on Exchange 2016 or 2019 must plan for migration to supported versions before October to avoid increased security risks. Failure to do so will expose them to potential exploits targeting unpatched vulnerabilities.