Hundreds of thousands of email credentials, many of which double as Active Directory domain credentials, came through to credential-trapping domains in clear text. Guardicore security researcher Amit ...
“The Exchange Autodiscover service provides an easy way for your client application to configure itself with minimal user input,” Microsoft’s documentation says. “Most users know their email address ...
A "design flaw" in the Microsoft Autodiscover protocol was subject to an investigation by researchers who found they were able to harvest domain credentials. On Wednesday, Guardicore Labs' AVP of ...
Microsoft is rushing to register Internet domains used to steal Windows credentials sent from faulty implementations of the Microsoft Exchange Autodiscover protocol. On Monday, Guardicore's Amit ...
Microsoft Exchange's Autodiscover protocol reportedly has a credential-leaking issue. Microsoft acknowledged the situation but did not provide a clear outline of what it planned to do to solve the ...
I've been running Exchange 2013 in a lab for a little while now, trying to get the hang of how to set it up properly and failing. The Microsoft Connectivity Analyzer is attempting to test Autodiscover ...