Hacking DeskVictoria Police warn of AI fake-doctor gift card scam How-to DeskHow to spot a fake shopping site before Black Friday AmplifiedAnberlin — Never Take Friendship Personal Hacking DeskRansomware negotiator charged, ShinyHunters link reported How-to DeskHow to set up a digital legacy for Apple and Google AmplifiedEmery — The Question How-to DeskHow to run Chrome's Safety Check and tighten privacy How-to DeskHow to move to a new phone and wipe the old one AmplifiedDemon Hunter — Summer of Darkness How-to DeskHow to lock down your WhatsApp privacy settings How-to DeskHow to lock down your Apple Account AmplifiedNorma Jean — Bless the Martyr and Kiss the Child How-to DeskHow to check every protection in Windows Security How-to DeskHow to check your Mac's security settings How-to DeskHow to check if your email was in a data breach How-to DeskHow to cancel subscriptions on iPhone and Android How-to DeskHow to ask a company what personal data it holds on you How-to DeskHow to use a travel eSIM on your iPhone overseas How-to DeskHow to lock down your home Wi-Fi router How-to DeskHow to screen scam calls on iPhone and Pixel

Hacking DeskVictoria Police warn of AI fake-doctor gift card scam How-to DeskHow to spot a fake shopping site before Black Friday AmplifiedAnberlin — Never Take Friendship Personal Hacking DeskRansomware negotiator charged, ShinyHunters link reported How-to DeskHow to set up a digital legacy for Apple and Google AmplifiedEmery — The Question How-to DeskHow to run Chrome's Safety Check and tighten privacy How-to DeskHow to move to a new phone and wipe the old one AmplifiedDemon Hunter — Summer of Darkness How-to DeskHow to lock down your WhatsApp privacy settings How-to DeskHow to lock down your Apple Account AmplifiedNorma Jean — Bless the Martyr and Kiss the Child How-to DeskHow to check every protection in Windows Security How-to DeskHow to check your Mac's security settings How-to DeskHow to check if your email was in a data breach How-to DeskHow to cancel subscriptions on iPhone and Android How-to DeskHow to ask a company what personal data it holds on you How-to DeskHow to use a travel eSIM on your iPhone overseas How-to DeskHow to lock down your home Wi-Fi router How-to DeskHow to screen scam calls on iPhone and Pixel

Saturday 17 October 2026

Microsoft patches Exchange flaw that reads other mail

An out-of-band Exchange Server update fixes CVE-2026-96940, which lets a logged-in attacker read other users' mailboxes.

Quin Halberg Saturday 17 October 2026, open calendar5 min read

Photo: logopop / Wikimedia Commons (CC BY-SA 3.0), cropped

Listen

Free browser voice. Starts at once.

Uses text-to-speech.

Microsoft has shipped an emergency patch for on-premises Exchange Server after finding a flaw that lets a logged-in attacker read other people's mailboxes. The bug is CVE-2026-96940, rated 8.8, and Microsoft says exploitation is "More Likely."

Low office buildings on Microsoft's West Campus in Redmond behind a car park and autumn trees — Photo: logopop / Wikimedia Commons (CC BY-SA 3.0), cropped

Read next

More in Hacking →

Say hello in our guest book

Published

Quin Halberg Saturday 17 October 2026 at 9:11 pm Adelaide, open calendar5 min read

This desk has not corrected this file. Corrections.

The paper

Comments

No notes on this story yet.

Sign in to comment