CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign

CISA has given federal agencies a short deadline to patch a Microsoft vulnerability. The bug was discovered by researchers who analyzed a long-running campaign by North Korean hackers. This campaign involved exploiting the job application process to achieve its goals. The vulnerability was disclosed to Microsoft by the researchers, leading to the current patching effort. Federal agencies now have a limited time to apply the patch and protect themselves from potential exploitation.