The NSA, CISA, Australia's Cyber Security Centre, and Canada's Cyber Centre jointly released comprehensive security practices for Exchange hardening.
Recent updates to the MCP specification have started to address this. OAuth 2.0 flows are now required, and resource server ...