As cited
Copy frozen at (site build).
vulnerabilities
New investments to reduce on-premises security risk
Microsoft announced an on-premises security initiative to help organizations reduce risk from on-premises server workloads by understanding exposure, migrating to cloud where feasible, and hardening systems that must remain. The initiative introduces On-Premises Baseline Security Mode for Exchange Server, SharePoint Server, and Skype for Business Server, which will automate security patching, enforce hardened default configurations, and apply emergency mitigations for emerging threats. Coming changes include automatic security update deployment in Q1 2027, default hardened configurations, drift detection, and expanded emergency mitigation capabilities.
Why it matters: Organizations running unsupported or unpatched on-premises servers face accelerated exploitation risk as artificial intelligence (AI) enables attackers to move faster; practitioners should assess which workloads can migrate to Microsoft 365 and prepare on-premises systems for automatic patching and baseline security enforcement beginning in Q1 2027.
- Source published
- First seen by Cybersecurity Tracker