The vulnerabilities in Microsoft Exchange Server, the software giant’s mail and calendar server, have been used in attacks since August, according to the company.
Microsoft said it’s working on a security patch and offered guidance for customers in the meantime.