{"id":8451,"date":"2021-06-11T13:29:38","date_gmt":"2021-06-11T20:29:38","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8451"},"modified":"2023-03-03T14:26:31","modified_gmt":"2023-03-03T21:26:31","slug":"may-31-csw-patch-watch-security-updates","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/may-31-csw-patch-watch-security-updates\/","title":{"rendered":"May 31: CSW Patch Watch &#038; Security Updates"},"content":{"rendered":"<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 800px; height: 491px;\" src=\"\/wp-content\/uploads\/2022\/10\/may-critical-patches.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><strong>Highlights of Patch Watch Issue 14<\/strong><\/h2>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Weaponized CVEs\">20 vendors released security patches for 467 vulnerabilities, including 10 CVEs with known exploits.<\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Old Vulnerabilities\">245 old vulnerabilities have been patched.<\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#CISA Alerts\">2 vulnerabilities that got patched this month are red-flagged by CISA.<\/a><\/p>\n<\/li>\n<\/ul>\n<h2><strong><a id=\"Weaponized CVEs\" name=\"Weaponized CVEs\"><\/a>Weaponized Vulnerabilities<\/strong><\/h2>\n<p dir=\"ltr\">We have 11 vulnerabilities that are known exploits. Here are our findings \u2013<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">7 CVEs are RCE bugs.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">2 CVEs linked to Webapps.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">7 CVEs are rated critical and 1 is of medium severity.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><a href=\"#Security Patches\">Click here for our analysis and download patches.<\/a><\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 338px;\" src=\"\/wp-content\/uploads\/2022\/10\/exploited-vulnerabilties.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><strong><a id=\"Old Vulnerabilities\" name=\"Old Vulnerabilities\"><\/a>Old Vulnerabilities<\/strong><\/h2>\n<p dir=\"ltr\">245 Old vulnerabilities have been fixed, ranging from the year 2015 to 2020.<\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">4 CVEs have known exploits with RCE and webapp.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">39 CVEs are rated high and 108 are of high severity.<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><a href=\"#Security Patches\">Click here for our analysis and download patches.<\/a><\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 424px;\" src=\"\/wp-content\/uploads\/2022\/10\/old-vulnerabilties.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">Notably, 52% of vulnerabilities are older weaknesses, and RCE flaws continue to be the major source of attack vectors that result in increasing cyber incidents and data breaches.<\/p>\n<h2 dir=\"ltr\"><strong><a id=\"CISA Alerts\" name=\"CISA Alerts\"><\/a>CISA Alerts<\/strong><\/h2>\n<p dir=\"ltr\">CISA has issued an alert for two vulnerabilities that have a high severity rating. Based on Common Weakness Enumeration (CWE) analysis, CVE-2021-1531 is categorized under CWE -74 (Improper Neutralization of Input During Web Page Generation), and CVE-2020-7774 as CWE &#8211; 20 (Improper Input Validation), which falls under the <a href=\"https:\/\/cwe.mitre.org\/top25\/archive\/2020\/2020_cwe_top25.html\">Top 3 dangerous Software Weaknesses 2020<\/a>.<\/p>\n<p><a href=\"#Security Patches\">Click here for our analysis and download patches.<\/a><\/p>\n<p><a id=\"Security Patches\" name=\"Security Patches\"><\/a><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrdcQfXjqiZPRilb?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><strong>Table: Security Patches<\/strong><\/p>\n<p>We know that security teams are inundated with more patches than they can handle but attackers need only one vulnerability to bring down an organization or halt a supply chain.<\/p>\n<p>CSW\u2019s Patch Watch helps organizations and their overworked security teams patch the most critical vulnerabilities and improve their security posture.\u00a0 <a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/\">Get on our mailing list for more information about emerging threats.<\/a><\/p>\n<h2 style=\"text-align: center;\"><strong>Protect your organization with Attack Surface Management as a Service. <a href=\"https:\/\/cybersecurityworks.com\/get-quote.php\">Talk to us<\/a>.<\/strong><\/h2>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Highlights of Patch Watch Issue 14 20 vendors released security patches for 467 vulnerabilities, including 10 CVEs with known exploits. 245 old vulnerabilities have been patched. 2 vulnerabilities that got patched this month are red-flagged by CISA. Weaponized Vulnerabilities We have 11 vulnerabilities that are known exploits. Here are our findings \u2013 7 CVEs are [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8451"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8451"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}