MICROSOFT ENDS EXCHANGE 2016/2019 SUPPORT

SECURITY DESK■ 1 MIN READ

WED, JUL 22, 2026

■ AI-SUMMARIZED FROM 2 SOURCES ▸ TIMELINE

Microsoft will discontinue security updates for Exchange 2016 and 2019 in October through its Extended Security Update program. Organizations running these versions must migrate to supported platforms.

Microsoft is phasing out security patches for Exchange 2016 and 2019, marking the end of the Extended Security Update (ESU) program for these versions. The deadline falls in October. Customers still relying on these older Exchange versions face increased security risks after the cutoff date. Microsoft recommends migrating to Exchange 2021 on-premises or Exchange Online in Microsoft 365. Exchange 2016 reached mainstream support end in October 2020, while Exchange 2019 reached mainstream support end in October 2023. The ESU program provided additional security updates beyond mainstream support periods. Organizations delaying migration should prioritize planning their upgrade path. Staying on unsupported versions exposes systems to unpatched vulnerabilities that attackers can exploit. Microsoft has provided extended timelines for customers to transition, with resources available on its support pages for migration planning.

■ SOURCES

► Bleeping Computer ► Ars Technica

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P550LG SMART TVS LOG AUDIO EVEN WHEN OFF

Security researchers discovered that LG smart TVs continue recording audio and scanning local networks even when the display is powered down. The findings raise concerns about user privacy and device security.

1H AGO— Industry Desk

P549CONNECTWISE WARNS OF SCREENCONNECT FLAW, PATCH PENDING

ConnectWise has disclosed a new vulnerability in ScreenConnect remote access software without an immediate patch available. The company is offering temporary mitigation measures while preparing a fix for later this week.

1H AGO— Industry Desk

P547MIKROTIK ROUTER FLAWS EXPLOITED IN ACTIVE HIJACKING ATTACKS

Hackers are actively exploiting a chain of two newly disclosed vulnerabilities in MikroTik RouterOS to seize control of routers with exposed SSH services. The attacks target internet-facing devices and pose immediate risk to affected networks.

1H AGO— Security Desk

P542N-ABLE PATCHES CRITICAL N-CENTRAL FLAW

N-able has released an emergency hotfix for a maximum-severity remote code execution vulnerability in its N-central RMM platform. The flaw is being actively exploited in ongoing attacks.

5H AGO— Industry Desk

◄ BACK TO NEWS

MICROSOFT ENDS EXCHANGE 2016/2019 SUPPORT

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF