Patch Tuesday: Microsoft Plugs Windows Hole Exploited in Ransomware Attacks

By Orbit Brain December 13, 2022 0 179 views

Residence › Endpoint Safety

Patch Tuesday: Microsoft Plugs Home windows Gap Exploited in Ransomware Assaults

By Ryan Naraine on December 13, 2022

Microsoft on Tuesday pushed a significant Home windows replace to deal with a safety function bypass already exploited in international ransomware assaults.

The working system replace, launched as a part of Microsoft’s scheduled Patch Tuesday, addresses a flaw that lets malicious attackers use rigged recordsdata to evade MOTW (Mart of the Internet) defenses.

“An attacker can craft a malicious file that might evade Mark of the Internet (MOTW) defenses, leading to a restricted lack of integrity and availability of security measures equivalent to Protected View in Microsoft Workplace, which depend on MOTW tagging,” in keeping with Microsoft’s barebones documentation of the problem.

The safety defect, tracked as CVE-2022-44698, is marked as publicly disclosed and exploited, including to the urgency for Home windows fleet directors to prioritize this month’s patches.

SecurityWeek understands that hackers linked to the the infamous Magniber ransomware group have exploited the safety function bypass bug in data-theft and extortion assaults.

Microsoft can be calling particular consideration to CVE-2022-44710, a privilege escalation flaw affecting the DirectX graphics kernel. Microsoft described the bug as a race situation subject that’s already been publicly disclosed. “An attacker who efficiently exploited this vulnerability might acquire SYSTEM privileges,” Redmond stated.

In all, Microsoft documented a minimum of 52 vulnerabilities in a variety of working system parts and software program merchandise. Six of the 52 bulletins are rated crucial, Microsoft’s highest severity score.

The December Patch Tuesday barrage additionally contains main fixes from VMware, Adobe, Fortinet and Citrix.

Associated: NSA Outs Chinese language Hackers Exploiting Citrix Zero-Day

Associated: VMware Patches VM Escape Flaw Exploited at Geekpwn Occasion

Associated: Fortinet Ships Emergency Patch for Already-Exploited VPN Flaw

Get the Each day Briefing

Most Current
Most Learn

Patch Tuesday: Microsoft Plugs Home windows Gap Exploited in Ransomware Assaults
Adobe Patches 38 Flaws in Enterprise Software program Merchandise
VMware Patches VM Escape Flaw Exploited at Geekpwn Occasion
Mapping Menace Intelligence to the NIST Compliance Framework
NSA Outs Chinese language Hackers Exploiting Citrix Zero-Day
Snyk Raises $196.5 Million at $7.four Billion Valuation
Passkeys Now Absolutely Supported in Google Chrome
Ransomware Group Threatens to Publish Information Stolen From California Division of Finance
New Python-Primarily based Backdoor Concentrating on VMware ESXi Servers
Twitter Responds to Current Information Leak Reviews

On the lookout for Malware in All of the Mistaken Locations?

First Step For The Web’s subsequent 25 years: Including Safety to the DNS

Tattle Story: What Your Pc Says About You

Be in a Place to Act By Cyber Situational Consciousness

Report Reveals Closely Regulated Industries Letting Social Networking Apps Run Rampant

2010, A Nice 12 months To Be a Scammer.

Do not Let DNS be Your Single Level of Failure

The right way to Determine Malware in a Blink

Defining and Debating Cyber Warfare

The 5 A’s that Make Cybercrime so Enticing

The right way to Defend In opposition to DDoS Assaults

Safety Budgets Not in Line with Threats

Anycast – Three Causes Why Your DNS Community Ought to Use It

The Evolution of the Prolonged Enterprise: Safety Methods for Ahead Considering Organizations

Utilizing DNS Throughout the Prolonged Enterprise: It’s Dangerous Enterprise

APT buffer overflow China crowdstrike CVE-2022-24521 CVE-2022-44698 CVE-2022-44710 Exchange Server magniber memory corruption Microsoft NSA patch tuesday ransomware vulnerability worm attack XSS

Orbit Brain

https://orbitbrain.com/

Orbit Brain is the senior science writer and technology expert. Our aim provides the best information about technology and web development designing SEO graphics designing video animation tutorials and how to use software easy ways
and much more. Like Best Service Latest Technology, Information Technology, Personal Tech Blogs, Technology Blog Topics, Technology Blogs For Students, Futurism Blog.