When users set up an Exchange email client for the first time, they are asked to provide their email address and password. Guardicore captured credentials for companies across various sectors (Image Credit: Guardicore) How the Exchange Server Autodiscover protocol works 96,671 UNIQUE credentials that leaked from various applications such as Microsoft Outlook, mobile email clients and other applications interfacing with Microsoft’s Exchange server.372,072 Windows domain credentials in total.And between April 16th, 2021 to August 25th, 2021 Guardicore says it captured: The domains were configured to connect to a web server under Guardicore’s control.

Domains purchased by Guardicore included: In the paper, Amit Serper reveals how Guardicore purchased multiple Autodiscover domains with a top-level domain (TLD) suffix. Researchers at security company Guardicore have released details of a security issue in the Autodiscover protocol that Microsoft Exchange Server clients, like Outlook, use for automatic configuration. Microsoft Exchange Server Autodiscover protocol leaks thousands of user credentials And how to mitigate the issue in your environment. In this article, I explain how the recently discovered flaw in the Exchange Server Autodiscover protocol can leak user credentials.

Outlook autodiscover on mac hack