{"id":40065,"date":"2021-03-18T22:00:47","date_gmt":"2021-03-18T22:00:47","guid":{"rendered":"https:\/\/www.microsoft.com\/security\/blog\/?p=93179"},"modified":"2021-03-18T22:00:47","modified_gmt":"2021-03-18T22:00:47","slug":"automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/","title":{"rendered":"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus"},"content":{"rendered":"<p>As cybercriminals continue to exploit unpatched on-premises versions of Exchange Server 2013, 2016, and 2019, we continue to actively work with customers and partners to help them secure their environments and respond to associated threats. To date, we have released a <a href=\"https:\/\/support.microsoft.com\/help\/5000871\">comprehensive Security Update<\/a>, a one-click interim <a href=\"https:\/\/aka.ms\/eomtrelease\">Exchange On-Premises Mitigation Tool<\/a> for both current and out-of-support versions of on-premises Exchange Servers, and <a href=\"https:\/\/aka.ms\/exchange-customer-guidance\">step-by-step guidance<\/a> to help address these attacks.<\/p>\n<p>Today, we have taken an additional step to further support our customers who are still vulnerable and have not yet implemented the complete security update. With the latest security intelligence update, Microsoft Defender Antivirus and System Center Endpoint Protection will <strong>automatically mitigate<\/strong> CVE-2021-26855 on any vulnerable Exchange Server on which it is deployed. Customers do not need to take action beyond ensuring they have installed the latest security intelligence update (build <strong>1.333.747.0<\/strong> or newer), if they do not already have automatic updates turned on.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-93181\" src=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2021\/03\/DDM-1.png\" alt width=\"800\" height=\"407\" srcset=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2021\/03\/DDM-1.png 800w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2021\/03\/DDM-1-300x153.png 300w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2021\/03\/DDM-1-768x391.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\"><\/p>\n<p>The Exchange security update is still the most comprehensive way to protect your servers from these attacks and others fixed in earlier releases. This interim mitigation is designed to help protect customers while they take the time to implement the latest Exchange Cumulative Update for their version of Exchange.<\/p>\n<p>Microsoft will provide guidance to our security partners so that they have the option to make available similar, simple mitigations in their products as well.<\/p>\n<p>We are deeply committed to protecting our customers.&nbsp; To stay up to date please continue to review the content posted at <a href=\"https:\/\/aka.ms\/exchangevulns\">https:\/\/aka.ms\/exchangevulns<\/a>.<\/p>\n<h3>Frequently Asked Questions<\/h3>\n<p><strong>Q: If I have Microsoft Defender Antivirus installed on my Exchange Server do I need to take any further action to get this mitigation?<\/strong><\/p>\n<p>A: Customers that install Microsoft Defender Antivirus and have automatic definition updates enabled (default setting) do not have to take further action to receive the mitigation.<\/p>\n<p><strong>Q: My organization manages Microsoft Defender Antivirus definition updates.&nbsp; What do I need to do to ensure I have this mitigation?<\/strong><\/p>\n<p>A: Customers that manage Microsoft Defender Antivirus definition updates need to select the new detection build (<strong>1.333.747.0 or newer<\/strong>) and deploy that to the Exchange Server.<\/p>\n<p><strong>Q: After this mitigation, do I still need to install the security update?<\/strong><\/p>\n<p>A: Yes.&nbsp; This automatic mitigation breaks the attack chain by mitigating CVE-2021-26855.&nbsp; Customers should still prioritize getting current on security updates for Exchange Server to comprehensively address the vulnerabilities.<\/p>\n<p><strong>Q: When does Microsoft Defender Antivirus apply the mitigation?<\/strong><\/p>\n<p>A: Microsoft Defender Antivirus will automatically identify if a vulnerable version of Exchange Server is installed and apply the mitigations the first time the security intelligence update is deployed. &nbsp;The mitigation is deployed once per machine.<\/p>\n<p><strong>Q: Is cloud protection required to receive the mitigation?<\/strong><\/p>\n<p>A: No.&nbsp; However, enabling cloud protection is a best practice that will keep you with the most current protections against the ever-changing threat environment.&nbsp; Customers are encouraged to enable cloud protection.<\/p>\n<p><strong>Q: What can I do if I don\u2019t have Microsoft Defender Antivirus?<\/strong><\/p>\n<p>A: Use the One-Click Microsoft Exchange On-Premises Mitigation Tool found <a href=\"https:\/\/msrc-blog.microsoft.com\/2021\/03\/15\/one-click-microsoft-exchange-on-premises-mitigation-tool-march-2021\/\">here<\/a>.<\/p>\n<p> READ MORE <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/18\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Defender Antivirus and System Center Endpoint Protection will automatically mitigate CVE-2021-26855 on any vulnerable Exchange Server on which it is deployed. We have taken this additional step to further support our customers who are still vulnerable and have not yet implemented the complete security update.<br \/>\nThe post Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus appeared first on Microsoft Security. READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":40066,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[276],"tags":[9279,9280,9281,9282,347,3873,643,7221,19],"class_list":["post-40065","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-secure","tag-cve-2021-26855","tag-cve-2021-26857","tag-cve-2021-26858","tag-cve-2021-27065","tag-cybersecurity","tag-exchange-server","tag-exploits","tag-microsoft-security-intelligence","tag-vulnerabilities"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-18T22:00:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/03\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"407\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus\",\"datePublished\":\"2021-03-18T22:00:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/\"},\"wordCount\":520,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png\",\"keywords\":[\"CVE-2021-26855\",\"CVE-2021-26857\",\"CVE-2021-26858\",\"CVE-2021-27065\",\"Cybersecurity\",\"Exchange Server\",\"exploits\",\"Microsoft security intelligence\",\"Vulnerabilities\"],\"articleSection\":[\"Microsoft Secure\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/\",\"name\":\"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png\",\"datePublished\":\"2021-03-18T22:00:47+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png\",\"width\":800,\"height\":407},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2021-26855\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/cve-2021-26855\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/","og_locale":"en_US","og_type":"article","og_title":"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-03-18T22:00:47+00:00","og_image":[{"width":800,"height":407,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/03\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus","datePublished":"2021-03-18T22:00:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/"},"wordCount":520,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/03\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png","keywords":["CVE-2021-26855","CVE-2021-26857","CVE-2021-26858","CVE-2021-27065","Cybersecurity","Exchange Server","exploits","Microsoft security intelligence","Vulnerabilities"],"articleSection":["Microsoft Secure"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/","url":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/","name":"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/03\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png","datePublished":"2021-03-18T22:00:47+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/03\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/03\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus.png","width":800,"height":407},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/automatic-on-premises-exchange-server-mitigation-now-in-microsoft-defender-antivirus\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"CVE-2021-26855","item":"https:\/\/www.threatshub.org\/blog\/tag\/cve-2021-26855\/"},{"@type":"ListItem","position":3,"name":"Automatic on-premises Exchange Server mitigation now in Microsoft Defender Antivirus"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40065","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=40065"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/40065\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/40066"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=40065"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=40065"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=40065"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}