if anybody knows anybody at the UN Umoja (the UN's shared services), get them to patch these boxes for CitrixBleed2 and reset all sessions (including AAA) - there's somebody from Chinese state logged into them going brrr for the past three weeks.
If anybody thinks 'Kevin cannot be serious with these posts', they're extraordinarily effective at getting stuff patched as usually somebody knows somebody.