Here's the CISA announcement:

https://www.cisa.gov/news-events/cybersecurity-advisories/aa...