Dan Goodin / Ars Technica:
A closer look at the UK Electoral Commission hack, disclosed nine months after discovery, which likely relied on a now-patched Microsoft Exchange Server flaw — Evidence appears to show a critical 0-day tracked as ProxyNotShell was exploited. — It’s looking more and more likely …