Microsoft detected an attack that was exploiting the recently exposed Spring4Shell RCE flaw, targeting its own cloud service products.
Spring4Shell
Spring officially released a security bulletin, disclosing that there is a remote code execution (RCE) (CVE-2022-22965)