This week, we look at the end of support for Microsoft Exchange servers 2016 and 2019, as well as the latest phishing technology, “Darcula,” that IT leadership should be aware of.
Microsoft Exchange end of support
Microsoft has announced that support for Exchange Server 2016 and Exchange Server 2019 will conclude on October 14, 2025. Post this date, these versions will no longer receive security patches, bug fixes, or technical support, exposing organizations to significant security vulnerabilities, compliance issues, and operational disruptions.
Implications of End of Support:
- Security Risks: Without regular security updates, systems become susceptible to cyberattacks, including data breaches and ransomware.
- Lack of Technical Support: Organizations will be without official assistance for troubleshooting, leading to potentially prolonged downtimes and increased operational costs.
- Compliance Risks: Operating on unsupported software may result in non-compliance with regulations such as GDPR and HIPAA, potentially leading to legal consequences.
- Operational Inefficiencies: Outdated software may lack modern features and integrations, hindering productivity and increasing maintenance complexities.
Additionally, this end-of-support timeline affects related products, including Microsoft Office 2016, Microsoft Office 2019, Outlook 2016, Outlook 2019, Skype for Business 2016, Skype for Business 2019, Skype for Business Server 2015, and Skype for Business Server 2019.
Organizations are advised to begin planning their transition to supported platforms to ensure business continuity and security. Options include upgrading to newer versions of Exchange Server or migrating to cloud-based solutions like Microsoft 365. Proactive planning and early action are essential to mitigate risks associated with unsupported software.
TL;DR: End of support for Microsoft Exchange 2016 & 2019
Microsoft will end support for Exchange Server 2016 and 2019 on October 14, 2025, stopping security updates and technical support, increasing security and compliance risks. This also affects Office 2016/2019, Outlook 2016/2019, and Skype for Business. Organizations should upgrade or migrate to Microsoft 365 to stay secure.
Darcula Phishing kit automates brand impersonation
The Darcula phishing-as-a-service (PhaaS) platform has released Version 3, making it easier for cybercriminals to impersonate any brand without technical expertise. Previously, Darcula offered over 200 pre-made templates, primarily targeting delivery services. The new version introduces a URL cloning feature, allowing users to enter any website URL, which Darcula then clones using browser automation tools, creating a fully functional phishing site.
This advancement significantly lowers the barrier to conducting sophisticated credential theft and fraud. Unlike traditional phishing kits that require manual setup, Darcula automates the process, making attacks more efficient and scalable. Cybercriminals can now quickly generate phishing pages nearly identical to legitimate websites, increasing the likelihood of victim deception.
Security researchers warn that Darcula V3, currently in user testing, will further increase phishing threats once launched this month. To mitigate risks, organizations must implement strong email security, user education, and multi-factor authentication (MFA). As phishing kits become more advanced and accessible, businesses and individuals must remain vigilant against evolving cyber threats.
TL;DR: Darcula Phishing Kit
The Darcula phishing kit (Version 3) lets cybercriminals clone any website by entering its URL, making phishing easier and more scalable. Unlike previous versions with preset templates, this update automates realistic site replicas, increasing fraud risks. Experts warn of rising threats, urging stronger email security, user awareness, and MFA.
Protect your endpoints
These stories cover the support ending for known and widely used technologies and the advancing capabilities (and ease of access) of malicious platforms. Both of these highlight the importance of resilience, restriction, and, of course, always keeping up to date with current trends. Get in touch to learn how ThinScale can help keep your endpoint environment secured against the latest threats.
