Unpatched vulnerable VPN servers hit by Cring ransomware