Following confirmation of a Samsung smartphone spyware zero-day attack, the Cybersecurity and Infrastructure Security Agency urges organizations to update now.