Hmmm, just learned about an up to date instance being hacked. Learned how it happened, so now waiting for the announcement to confirm if there's a chance it was exploited before the CVE was announced.