Still Unpatched

Channel Futures: Any reasons behind why Exchange servers remain unpatched?

Huntress’ John Hammond:  At Huntress, we’ve seen over 650 SMBs compromised by Exchange. While we have been shouting from the rooftops, kicking and screaming for these servers to be patched, some organizations still have not. In early March, there was a lot of uncertainty and back-and-forth on how to validate or verify these patches have taken effect. Some organizations may have previously tried to patch, and just went on their merry way, unaware that the patch had failed. Some may be running such an outdated or deprecated legacy server [that] it becomes more of a nightmare than expected, or for others it may just be sheer negligence.

Organizations may now see this as a wake-up call to move to the cloud, but this is a painstakingly slow process that does require months of planning. There is no telling why some servers remain unpatched, but truthfully, there is no excuse.