Microsoft released an emergency security patch on Sunday to “mitigate active attacks targeting on-premises servers.”

Microsoft has patched two critical zero-day SharePoint security flaws that have already been exploited by hackers to attack vulnerable organizations.

Eye Security says the figure is likely an undercount.