US government urges federal agencies to patch Microsoft 365 now

First binding CISA directive of 2025 addresses Microsoft 365 issues