// #threat-modelling

Exchange Keeps Getting Exploited Because We Still Treat Email Infrastructure as Trusted

CVE-2026-42897 is the third actively exploited Exchange zero-day in fourteen months. Each time, the analysis focuses on the specific vulnerability. The more useful question is why email infrastructure continues to receive weaker security monitoring and network controls than VPN gateways and web servers, despite processing more untrusted content than any other enterprise system.