Microsoft released an emergency security patch on Sunday to “mitigate active attacks targeting on-premises servers.”

The hackers behind the initial wave of attacks exploiting a zero-day in Microsoft SharePoint servers have so far primarily targeted government organizations, according to researchers and news reports.

Active SharePoint exploits since July 7 target governments and tech firms globally, risking key theft and persistent access.