https://www.bitsight.com/press-releases/bitsight-discovers-c...
https://www.cisa.gov/uscert/ics/advisories/icsa-22-200-01
The suggested "mitigations" are interesting.
https://www.bitsight.com/press-releases/bitsight-discovers-c...