Microsoft confirms active zero-day attacks on on-premises SharePoint servers, no patch yet; mitigation advised amid rising risk.