Will Dormann on Twitter: "Keep an eye on this thread. This new Exchange thing going around appears to be ProxyShell, but for authenticated users. That is, when Microsoft fixed ProxyShell, they only did so for unauthenticated users. A job done!" / Twitter
https://twitter.com/wdormann/status/1575814683910545409