{"id":8351,"date":"2022-07-09T10:38:52","date_gmt":"2022-07-09T10:38:52","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8351"},"modified":"2023-03-07T16:11:10","modified_gmt":"2023-03-07T23:11:10","slug":"dhs-cisa-kevs-weekly-edition-10-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/dhs-cisa-kevs-weekly-edition-10-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 10: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">Following frequent and highly impactful cyberattacks, the CISA has updated the KEV list and has recommended that all federal agencies patch these vulnerabilities within the due date. This week, 12 vulnerabilities need to be patched by July 10, 2022.<\/p>\n<p dir=\"ltr\">We analyzed the CISA Known Exploited Vulnerabilities (KEVs) and found the following:<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 800px; height: 300px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kevs-2.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Of the 12 KEVs, the oldest vulnerability, a Microsoft WinVerifyTrust function Remote Code Execution, dates back to 2013.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 324px;\" src=\"\/wp-content\/uploads\/2022\/10\/year-wise-breakdown-2.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">Several prominent vendor products are affected by the vulnerabilities that need to be patched by July 10, 2022.<br \/>\n<img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 393px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendors-affected-4.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">Patching these vulnerabilities is of high priority, as most of them rank high on the CVSS severity scale.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 587px;\" src=\"\/wp-content\/uploads\/2022\/10\/severity-scores-3.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p dir=\"ltr\">The following CWEs are associated with several vulnerabilities that need to be patched this week.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 550px; height: 499px;\" src=\"\/wp-content\/uploads\/2022\/10\/software-weaknesses-2.png\" alt=\"\" \/><br \/>\n<iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrqjCGY85YQ9ZEJj?backgroundColor=green&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong>Table: DHS CISA KEVs<\/strong><\/p>\n<p dir=\"ltr\">Half of these vulnerabilities can be used to remotely execute malicious code. Since the start of the pandemic, there has been an increase of over 75% in the activity of ransomware groups. Hence, all federal and private organizations should immediately patch the above-listed CVEs, as they are highly susceptible to attacks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Following frequent and highly impactful cyberattacks, the CISA has updated the KEV list and has recommended that all federal agencies patch these vulnerabilities within the due date. This week, 12 vulnerabilities need to be patched by July 10, 2022. We analyzed the CISA Known Exploited Vulnerabilities (KEVs) and found the following: How Far Back Do [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,289],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8351"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8351"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}