"We are exploring the possibility of introducing Copilot for Exchange Server (on-premises)," Microsoft says, linking to a ten-question form that asks: "Would your organization be comfortable enabling Copilot for Exchange Server if it requires sending some Exchange Server data to the cloud?" Er, probably not. After all, many administrators run an on-premises version of Exchange precisely because they don't want any Exchange Server data being sent to Microsoft's cloud.
Windows 10's free support has shuffled off this mortal coil for most customers - but that's merely the headline act in Microsoft's October support massacre. Older versions of Office and Windows Server have also been shown the door. Support for Office 2019 (including Office 2016) and Exchange Server 2019 flatlined on October 14. While Microsoft will sell orphaned Windows 10 users an extra year or so of life support via its Extended Security Updates (ESU) program,
In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could potentially escalate privileges within the organization's connected cloud environment without leaving easily detectable and auditable traces.