The hackers in the Ghost group, however, use publicly available code to exploit common vulnerabilities in organizations' software that have not been removed by updated patches, the FBI says.

The advisory from CISA, FBI and MS-ISAC, issued Wednesday ... Organizations are urged to promptly apply security patches, particularly for known vulnerabilities the group exploits.