Without paywall: https://archive.ph/lERWe

And the CISA announcement: https://www.cisa.gov/news-events/news/when-tech-vendors-make...