The company acknowledged that Exchange Server was attacked before the patch was released.
In a fresh security update, Microsoft warned of a critical vulnerability in Exchange Server that was exploited as 0day before being patched on Patch Tuesday in February.
CVE-2024-21410 (CVSS score: 9.8)...
