CISA's KEV entry for CVE-2024-20439 said it's "unknown" whether the flaw has been weaponized in ransomware attacks. On March 19, Johannes Ullrich of the SANS Internet Storm Center observed ...