A critical vulnerability in Microsoft Defender, known as BlueHammer, is now being actively exploited by ransomware groups, according to a recent update from the U.S. Cybersecurity and Infrastructure Security Agency (CISA).