Attackers are exploiting a new Windows zero-day security vulnerability, Microsoft says: Here's the fix.
Although exploiting CVE-2022-37969 requires access to the target system, and the ability to run code upon it, lowers the risk, it doesn't mitigate it to anything approaching zero. A threat actor will likely use malware that exploits a different vulnerability or a simple 'malicious link click' phishing attack to achieve this access.
Mike Walters, a cybersecurity executive at Action1, says that"since the vulnerability has low complexity and requires no user interaction, an exploit will likely soon be in the arsenal of both white hats and black hats.” It is therefore highly recommended that you patch this sooner rather than later.
Berita ini telah kami rangkum agar Anda dapat membacanya dengan cepat. Jika Anda tertarik dengan beritanya, Anda dapat membaca teks lengkapnya di sini. Baca lebih lajut: