Microsoft confirms hackers are actively exploiting Exchange zero-day flaws

Microsoft confirms that a state-sponsored threat actor is chaining two newly discovered zero-day vulnerabilities, but how bad is it really?