New Microsoft Security Alert: State-Sponsored 0Day Exchange Server Attacks Confirmed Microsoft confirmed on September 30 that two Exchange Server zero-day vulnerabilities are being exploited by likely state-sponsored attackers.