CISA has issued a “Shields Up” warning. CISA is recommending that agencies and critical infrastructure providers implement best practices, including prioritizing risk-based patching of devices and endpoints throughout the enterprise, adoption of multifactor authentication capabilities, and developing conditional access controls to validate compliance with security policies prior to authorizing access to applications and data, both on-premise and in the cloud.