EWS Free Area

Did you know that your Exchange server might be allowing anyone to send anonymous emails to internal users by default? In this post, I explore the security implications of the Default FrontEnd receive connector, why it matters in hybrid environments, and how attackers might exploit it. Based on findings from real Risk Assessment Programs, I…