{"id":36596,"date":"2022-06-09T06:45:00","date_gmt":"2022-06-09T06:45:00","guid":{"rendered":"https:\/\/cloudnewshub.com\/archives\/36596"},"modified":"2022-06-09T06:45:00","modified_gmt":"2022-06-09T06:45:00","slug":"cyber-researchers-step-in-to-fill-patch-tuesdays-shoes","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=36596","title":{"rendered":"Cyber researchers step in to fill Patch Tuesday\u2019s shoes"},"content":{"rendered":"
<\/div>\n

Ahead of the final Patch Tuesday<\/a>, which true to precedent is due on Tuesday 14 June, analysts at Recorded Future are stepping into the breach, launching a monthly report that will detail the most impactful common vulnerabilities and exposures<\/a> (CVEs) circulating.<\/p>\n

And its inaugural edition contains some significant vulnerabilities, including several zero-days. Of these, the most critical is probably CVE-2022-30190, or Follina<\/a>, which Recorded Future\u2019s research unit, the Insikt Group<\/a>, said it saw being exploited by China-linked threat actors on 30 May, barely 24 hours after initial disclosure.<\/p>\n

\u201cIt was also later confirmed that the vulnerability was used in three threat actor campaigns prior to public disclosure, including a spear-phishing campaign targeting entities in Saudi Arabia. The exploitation before disclosure shows how quickly APT groups take advantage of major new exploits,\u201d said the team.<\/p>\n

\u201cA key takeaway from the Follina disclosure is how fast attackers are using maldoc-based exploits now that Microsoft is turning off VBA-based macros by default<\/a>,\u201d they added.<\/p>\n

\u201cSecurity teams should prepare themselves for an eventful second half of the year as additional ways that Microsoft systems are vulnerable to maldoc exploits are likely to be discovered.\u201d<\/p>\n

The team said it was tracking several zero-days in a wide array of products and software including remote support tools, operating systems, Active Directory services and even graphics drivers. Of the seven most critical vulnerabilities listed, five were zero-days when disclosed, meaning users have had no time to patch before malicious actors started exploiting them.<\/p>\n

\u201cMere vulnerability management alone is not sufficient,\u201d the said. \u201cSecurity teams are strongly encouraged to deploy a defence-in-depth approach across their networks.\u201d<\/p>\n

The full list of vulnerabilities, in order of severity, contained in the first edition of CVE Monthly is as follows:<\/p>\n