CISA orders agencies to patch Exchange bug abused by ransomware gang

The CISA has added two more security vulnerabilities to its catalog of exploited bugs, one of which affects Microsoft Exchange and the second one is in Windows Advanced Local Procedure Call.