Microsoft Ends Exchange 2016/2019 Security Updates in October

Microsoft announced this week that it will discontinue security updates for Exchange Server 2016 and Exchange Server 2019 in October. This cessation of support applies even to customers utilizing the Extended Security Update (ESU) program. Organizations that have not yet migrated to newer versions of Exchange Server or Microsoft 365 face potential security risks following this deadline.

The company has been encouraging customers to migrate to Exchange Online as part of Microsoft 365 or to the latest on-premises Exchange Server versions. The end of support means that any newly discovered vulnerabilities in Exchange 2016 and 2019 will not receive patches from Microsoft. This leaves these older systems exposed to potential exploits, including malware, ransomware, and other cyberattacks.

Microsoft has provided guidance and resources to assist customers with their migration plans. The Extended Security Update program was designed as a temporary measure for organizations that required additional time to transition. However, its conclusion in October marks a definitive end to official security support for these specific Exchange Server versions. Users are strongly advised to complete their migration before the October deadline to maintain a secure email infrastructure.