White House says spree is an 'active threat'; hackers exploit flaws in Microsoft Exchange, stealing email and infecting servers to let them take control remotely