"In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could ...