Really? I thought the article was quite clear. > On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server ...

Really? I thought the article was quite clear. > On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server ... > ... [Volexity] first saw attackers quietly exploiting the Exchange bugs on Jan. 6, 2021, ... If it still wasn't apparent by then, though, I would have thought that this line should've cleared things up: > We’ve worked on dozens of cases so far where web shells were put on the victim system back on Feb. 28 [before Microsoft announced its patches], ...*