The FBI and Cybersecurity and Infrastructure Security Agency issued a joint advisory March 15 that Russian state-sponsored cyber actors gained network access through exploitation of default multifactor authentication protocols and a known vulnerability in Windows Print Spooler.
