Multiple critical unauthenticated SQL injection bugs and hard-coded credentials as well as command injection, and file upload bugs need urgent patching.
Patch, patch, patch...
"A coordinated attack on internal systems by highly sophisticated threat actors"