The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and National Security Agency (NSA), along with international partners from Australia and Canada, have released ‘Microsoft Exchange Server Security Best Practices‘, a guidance to harden on-premise Microsoft Exchange Server instances from potential exploitation.

Links:
Microsoft Exchange Server Security Best Practices

CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers