Here are a couple of good ones, with good diagrams of how the attack works:

- https://blogs.juniper.net/en-us/enterprise-cloud-and-transfo...

- https://www.govcert.ch/blog/zero-day-exploit-targeting-popul...