CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang | TechCrunch
… The agency cited BOD 22-01 , its operational guidance memo that allows it to instruct agencies to take security action when there is an active cyber threat to government networks. …