The attack on Kaseya VSA servers that led to REvil ransomware deployments has affected nearly 1,500 companies so far.
The Fancy Bear attack group has been running a long-term brute-force campaign against Office 365 and Exchange servers in U.S. organizations, the NSA said.
Exploit code for the CVE-2021-1675 Windows print spooler vulnerability is circulating and can bypass the patch for the bug.
Even when NSA discloses zero days to vendors, some of them don't respond quickly and issue fixes.
Microsoft said the Nobelium threat group recently compromised one of its customer support agents and then used stolen account information to target some customers.