Microsoft issues first official guidance on actively exploited ProxyShell vulnerabilities. The company has issued a series of bulletins and security updates since the first patches for the three Exchange Server vulnerabilities. Microsoft advised all organizations running the software to immediately install patches if they have not already done so. The vulnerabilities were discovered by Devcore security researcher Cheng-Da Tsai – also known as Orange Tsai. In July, the Biden administration attributed some of the initial attacks exploiting ProxyLogon to China’s Ministry of State Security.”]