CISA Releases Emergency Directive on Microsoft Windows Netlogon Remote Protocol

Earlier this month, exploit code for this vulnerability was publicly released. Given the nature of the exploit and documented adversary behavior, CISA assumes active exploitation of this vulnerability is occurring in the wild.

You can read the full article here.