The recently patched vulnerabilities in Microsoft Exchange that were being actively exploited by a state-sponsored threat group from China are now also being targeted by other groups in widespread attacks against enterprises. IT security teams need to prioritize the security updates for Microsoft Exchange and check their server logs for signs they may already be compromised.