{"id":8331,"date":"2022-08-12T10:06:24","date_gmt":"2022-08-12T10:06:24","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8331"},"modified":"2023-02-17T13:29:24","modified_gmt":"2023-02-17T20:29:24","slug":"dhs-cisa-kevs-weekly-edition-14-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/dhs-cisa-kevs-weekly-edition-14-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 14: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">CISA added four new CVEs to the KEV list on 9th Aug, 2022 and 11th Aug 2022: <strong>CVE-2022-30333, CVE-2022-34713, CVE-2022-27925, and CVE-2022-37042.<\/strong>\u00a0This brings the total KEVs to 794. Of these there are 21 vulnerabilities that need to be patched by the 15th of August 2022, as recommended by CISA.\u00a0 Let us see what they are:<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 750px; height: 410px;\" src=\"\/wp-content\/uploads\/2022\/09\/dhs-cisa-kevs-4.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Of the 21 KEVs, 8 vulnerabilities were discovered in 2017. The oldest vulnerability dates back to 2013.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 287px;\" src=\"\/wp-content\/uploads\/2022\/09\/year-wise-breakdown-4.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">Microsoft has the most number of vulnerabilities (11) that need to be patched by August 15, 2022. Since Windows devices are most targeted in recent attacks, organizations must be on the lookout for these vulnerabilities and patch them immediately.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 393px;\" src=\"\/wp-content\/uploads\/2022\/09\/vendors-affected-6.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">Patching these vulnerabilities is of high priority, as most of them rank high and critical on the CVSS.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 497px;\" src=\"\/wp-content\/uploads\/2022\/09\/severity-scores-5.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p dir=\"ltr\">The following CWEs have caused the 15 vulnerabilities that need to be patched this week.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 493px;\" src=\"\/wp-content\/uploads\/2022\/09\/software-weaknesses-4.png\" alt=\"\" \/><br \/>\n<iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr0BqOrYS65nLhhJ?backgroundColor=blue&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><strong>Table: DHS CISA KEVs<\/strong><\/p>\n<p dir=\"ltr\">The CVEs recommended by CISA to be patched by Aug 15th are old CVEs, meaning they\u2019ve been around for a while. Hackers love to target old CVEs as they have developed sophisticated and tried methods of attack for them. This week, SmokeLoader malware was found targeting two 2017 CVEs.<\/p>\n<p dir=\"ltr\">We recommend that all organizations patch these CVEs at the earliest.<\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><strong>For the latest news regarding vulnerabilities that are exploited and critical threats, read our blog on <a href=\"https:\/\/cybersecurityworks.com\/blog\/cyber-risk\/csws-threat-intelligence-august-08-2022-august-12-2022.html\">Weekly Threat Intelligence<\/a>.\u00a0<\/strong><\/p>\n<p dir=\"ltr\">\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CISA added four new CVEs to the KEV list on 9th Aug, 2022 and 11th Aug 2022: CVE-2022-30333, CVE-2022-34713, CVE-2022-27925, and CVE-2022-37042.\u00a0This brings the total KEVs to 794. Of these there are 21 vulnerabilities that need to be patched by the 15th of August 2022, as recommended by CISA.\u00a0 Let us see what they are: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,289,290,288,292],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8331"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8331"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}