https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/