The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reportedly confirmed that two of its systems were compromised in February by hackers that exploited Ivanti VPN vulnerabilities.