One of the employees responded and eventually ran two malicious payloads – but the malware didn't make it past security controls ... implement sufficient network layer protections," CISA ...