A "design flaw" in the Microsoft Autodiscover protocol was subject to an investigation by researchers who found they were able to harvest domain credentials. On Wednesday, Guardicore Labs' AVP of ...

Microsoft is rushing to register Internet domains used to steal Windows credentials sent from faulty implementations of the Microsoft Exchange Autodiscover protocol. On Monday, Guardicore's Amit ...

Bugs in the implementation of Microsoft Exchange's Autodiscover feature have leaked approximately 100,000 login names and passwords for Windows domains worldwide. In a new report by Amit Serper, ...

Hundreds of thousands of email credentials, many of which double as Active Directory domain credentials, came through to credential-trapping domains in clear text. Guardicore security researcher Amit ...

Let's assume I have a single Exchange 2010 SP3 box configured to serve out activesync/owa on https://webmail.domain1.com which is set as the internal and external URL in EMC (split DNS config). And in ...

This is an organization with an existing OWA and ActiveSync deployment. There's no Outlook Anywhere, nor plans to deploy in the near future. However, we do need AutoDiscover to implement ...

A design issue in the Microsoft Exchange Autodiscover feature can cause Outlook and other third-party Exchange client applications to leak plaintext Windows domain credentials to external servers.

When using Outlook in Mac with Office 365, you may receive a prompt saying — Outlook was redirected to the server autodiscover-s.outlook.com to get new settings for your account, Do you want to allow ...

Security researchers have found that the Autodiscover protocol used by Microsoft Exchange to automatically configure email clients such as Outlook can leak Windows domain credentials undetected in ...