Disclosure And Exploitation Timing

Attackers reached a domain controller through one exposed SolarWinds helpdesk

Microsoft's Defender team cannot say which of three SolarWinds flaws opened the door, because the December hosts were vulnerable to all of them, which makes the exposure list more useful than the patch list.