The US National Security Agency said organizations that cannot update immediately ​should take affected systems offline until the issue is fully mitigated.