A hacker names Hafnium is actively exploiting zero-day vulnerabilities in on-premises Microsoft Exchange servers, exposing thousands of organizations worldwide. Patching is crucial in stopping this attack – however that does not mean you are protected. Also need to scan and investigate for key indicators of compromise. Patching is not sufficient if you are compromised; remediation is required.