Exchange Server 2016 and 2019 Now Run Without Security Patches

Microsoft Exchange Server 2016 and 2019 have passed end of support, so they no longer receive security updates and are effectively permanently vulnerable. The Register urges organizations still running these versions to upgrade or migrate now rather than delay. The article is brief and does not detail new vulnerabilities or a specific migration deadline.

Why it matters: IT operations and governance teams running on-premises Exchange need to track unpatched mail servers as a standing security risk and fold their upgrade or migration into lifecycle planning.