Incident: Last week Microsoft and DHS CISA reported that a previously unknown vulnerability in on-premise, self-hosted Microsoft Exchange Servers was being exploited by government sponsored espionage hackers, dubbed Hafnium. The attacks allowed not only inbox access, but offered the ability for attackers to steal mailbox contents.