Disrupt the Microsoft Exchange Attacks with Zscaler

This advisory describes large-scale, in-the-wild exploitation of Microsoft Exchange Server zero-day vulnerabilities—initially linked to the HAFNIUM APT and subsequently adopted by other actors—affecting tens of thousands of organizations; it outlines attacker capabilities (credential theft, remote code execution, data access), impact estimates, and recommended mitigations including patching and applying Zscaler zero-trust controls to remove Exchange servers from internet exposure.