CYBERSECURITYTRACKER
Permanent story citation

New investments to reduce on-premises security risk

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12501

As cited

Copy frozen at (site build).

vulnerabilities

New investments to reduce on-premises security risk

Microsoft announced an on-premises security initiative to help organizations reduce risk from on-premises server workloads by understanding exposure, migrating to cloud where feasible, and hardening systems that must remain. The initiative introduces On-Premises Baseline Security Mode for Exchange Server, SharePoint Server, and Skype for Business Server, which will automate security patching, enforce hardened default configurations, and apply emergency mitigations for emerging threats. Coming changes include automatic security update deployment in Q1 2027, default hardened configurations, drift detection, and expanded emergency mitigation capabilities.

Why it matters: Organizations running unsupported or unpatched on-premises servers face accelerated exploitation risk as artificial intelligence (AI) enables attackers to move faster; practitioners should assess which workloads can migrate to Microsoft 365 and prepare on-premises systems for automatic patching and baseline security enforcement beginning in Q1 2027.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary