Microsoft has released an urgent update for Exchange Server in response to servers being actively attacked by a sophisticated threat actor. Organisations running Microsoft Exchange servers, particularly those directly exposed to the internet, are urged to patch these servers immediately. Exchange Online is not affected.

Use the following link for further information 

https://www.cert.govt.nz/it-specialists/advisories/urgent-microsoft-exchange-security-update/