{"id":17231,"date":"2023-04-11T11:04:32","date_gmt":"2023-04-11T18:04:32","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?p=17231"},"modified":"2023-04-24T10:04:12","modified_gmt":"2023-04-24T17:04:12","slug":"securins-threat-intelligence-apr-10-2023-apr-14-2023","status":"publish","type":"post","link":"https:\/\/webdev.securin.xyz\/articles\/securins-threat-intelligence-apr-3-2023-apr-7-2023\/","title":{"rendered":"Securin&#8217;s Threat Intelligence: Apr 10, 2023 &#8211; Apr 14, 2023"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"17231\" class=\"elementor elementor-17231\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-02c8318 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"02c8318\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ddbe16e\" data-id=\"ddbe16e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a3fa264 elementor-widget elementor-widget-text-editor\" data-id=\"a3fa264\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p dir=\"ltr\" style=\"line-height: 1.8; background-color: #ffffff; margin-top: 0pt; margin-bottom: 0pt; padding: 0pt 0pt 4pt; text-align: left;\"><strong><span style=\"color: #000000;\">This edition brings you early warnings, trending news about cyber threats, and the accurate threat context. Check out which threat group is on the rampage, what vulnerability it could soon weaponize, and more.<\/span><\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d81a1c5 elementor-widget elementor-widget-heading\" data-id=\"d81a1c5\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Check out our Threat Intelligence Podcast hosted by David Rushton!\u200b<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f513b4 elementor-widget elementor-widget-spacer\" data-id=\"0f513b4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-804537e elementor-widget elementor-widget-text-editor\" data-id=\"804537e\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div style=\"padding: 50% 0 0 0; position: relative;\"><iframe style=\"position: absolute; top: 0; left: 0; width: 100%; height: 100%;\" title=\"Apr 14 Podcast\" src=\"https:\/\/player.vimeo.com\/video\/817724887?h=bf1447629a&amp;badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/div>\n<script src=\"https:\/\/player.vimeo.com\/api\/player.js\"><\/script>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-06e09ce elementor-widget elementor-widget-heading\" data-id=\"06e09ce\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Trending Threats<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7532f9 elementor-widget elementor-widget-text-editor\" data-id=\"d7532f9\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><a href=\"#CISA-Adds-More-Vulnerabilities-to-the-KEV-Catalog\">CISA Adds More Vulnerabilities to the KEV Catalog<\/a><\/li><li><a href=\"#Guide-to-Protect-Against-BlackLotus-Attacks\"><span style=\"font-weight: 400;\">Guide to Protect Against BlackLotus Attacks<\/span><\/a><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-45e16b3 elementor-widget elementor-widget-heading\" data-id=\"45e16b3\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities to Watch Out For<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-78d7bb2 elementor-widget elementor-widget-text-editor\" data-id=\"78d7bb2\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><a href=\"#Multiple-Vulnerabilities-in-Sophos\">Multiple Vulnerabilities in Sophos<\/a><\/li><li><a href=\"#CVE-2023-29017-VM2-JavaScript-Bug\"><span style=\"font-weight: 400;\">CVE-2023-29017: VM2 JavaScript Bug<\/span><\/a><\/li><li><a href=\"#Multiple-Vulnerabilities-in-CISCO\"><span style=\"font-weight: 400;\">Multiple Vulnerabilities in CISCO<\/span><\/a><\/li><li><a href=\"#Apple-Zero-Days\">Apple Zero-Days<\/a><\/li><li><a href=\"#Critical-Vulnerabilities-in-SAP\"><span style=\"font-weight: 400;\">Critical Vulnerabilities in SAP<\/span><\/a><\/li><li><a href=\"#CVE-2023-28252-Windows-Common-Log-File-System-Vulnerability\"><span style=\"font-weight: 400;\">CVE-2023-28252: Windows Common Log File System Vulnerability<\/span><\/a><\/li><li><a href=\"#Microsoft-Patch-Tuesday\"><span style=\"font-weight: 400;\">Microsoft Patch Tuesday<\/span><\/a><\/li><li><a href=\"#Vulnerabilities-in-SharePoint\"><span style=\"font-weight: 400;\">Vulnerabilities in SharePoint<\/span><\/a><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c5581d4 elementor-widget elementor-widget-spacer\" data-id=\"c5581d4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1272e27 elementor-widget elementor-widget-heading\" data-id=\"1272e27\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Trending Threats<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-585df2e elementor-widget elementor-widget-spacer\" data-id=\"585df2e\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d252bc8 elementor-widget elementor-widget-menu-anchor\" data-id=\"d252bc8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"CISA-Adds-More-Vulnerabilities-to-the-KEV-Catalog\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-13dc0cf elementor-widget elementor-widget-heading\" data-id=\"13dc0cf\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">CISA Adds More Vulnerabilities to the KEV Catalog<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29f8989 elementor-widget elementor-widget-text-editor\" data-id=\"29f8989\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-27876\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2021-27876<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-27877\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2021-27877<\/span><\/a><span style=\"font-weight: 400;\">, and <\/span><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-27878\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2021-27878<\/span><\/a><span style=\"font-weight: 400;\"> are Veritas Backup Exec Agent vulnerabilities that are <\/span><a href=\"https:\/\/www.securin.io\/articles\/securins-threat-intelligence-apr-3-2023-apr-7-2023\/#UNC4466-Targets-Vulnerable-Backup-Installations-to-Gain-Initial-Access\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">actively exploited by UNC4466<\/span><\/a><span style=\"font-weight: 400;\">, an affiliate of the ALPHV ransomware group. All three vulnerabilities allow unauthenticated attackers to gain access and escalate privileges.<\/span><\/p><p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-1388\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2019-1388<\/span><\/a><span style=\"font-weight: 400;\"> is a high-severity privilege escalation vulnerability in Windows UAC (User Account Control). UAC helps prevent unauthorized changes to the operating system. When exploited, an unauthenticated attacker can launch a highly-privileged web browser on the normal desktop to install code and other malicious activities.<\/span><\/p><p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2023-26083\"><span style=\"font-weight: 400;\">CVE-2023-26083<\/span><\/a><span style=\"font-weight: 400;\"> is a vulnerability that affects the Mali GPU driver from Arm. It is part of an exploit chain (CVE-2022-4135, CVE-2022-38181, and CVE-2022-3723) that delivers commercial spyware to popular platforms such as Google, iOS, Microsoft, etc.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9753be6 elementor-widget elementor-widget-spacer\" data-id=\"9753be6\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-86b64e7 elementor-widget elementor-widget-menu-anchor\" data-id=\"86b64e7\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Guide-to-Protect-Against-BlackLotus-Attacks\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-777d669 elementor-widget elementor-widget-heading\" data-id=\"777d669\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Guide to Protect Against BlackLotus Attacks<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-55db5e8 elementor-widget elementor-widget-text-editor\" data-id=\"55db5e8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span>Microsoft <\/span><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/04\/11\/guidance-for-investigating-attacks-using-cve-2022-21894-the-blacklotus-campaign\/\" target=\"_blank\" rel=\"noopener\"><span>released a guide<\/span><\/a><span> for investigating the BlackLotus campaign, which utilizes a bootkit for persistence and defense evasion. BlackLotus has several techniques and processes such as bootloader files, custom directories, modified registry keys, event log entries, etc., that can be used for detecting its presence.&nbsp;<\/span><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-27876\" target=\"_blank\" rel=\"noopener\">BlackLotus is found to be exploiting <\/a><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-21894\" target=\"_blank\" rel=\"noopener\">CVE-2022-21894<\/a>, a Secure Boot Security Feature Bypass vulnerability. Despite the fact that Microsoft fixed the vulnerability in its January 2022 update, it is still possible to exploit it because the affected binaries, which are validly signed, have not yet been added to the UEFI revocation list. BlackLotus exploits this situation by introducing its own copies of legitimate but vulnerable binaries into the system to take advantage of the vulnerability.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-36afe28 elementor-widget elementor-widget-spacer\" data-id=\"36afe28\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0937f84 elementor-widget elementor-widget-heading\" data-id=\"0937f84\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities to Watch Out For<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d574dff elementor-widget elementor-widget-spacer\" data-id=\"d574dff\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ba4d590 elementor-widget elementor-widget-menu-anchor\" data-id=\"ba4d590\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Multiple-Vulnerabilities-in-Sophos\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-77b0b26 elementor-widget elementor-widget-heading\" data-id=\"77b0b26\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Multiple Vulnerabilities in Sophos<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32bb1a4 elementor-widget elementor-widget-text-editor\" data-id=\"32bb1a4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-1671\" target=\"_blank\" rel=\"noopener\">CVE-2023-1671<\/a> is an unauthenticated command injection vulnerability in the warn-proceed handler. Exploiting this will allow an attacker to execute arbitrary code.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-4934\" target=\"_blank\" rel=\"noopener\">CVE-2022-4934<\/a> is also a high severity vulnerability in the exception wizard. The command injection flaw requires authentication for successful exploitation.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2020-36692\" target=\"_blank\" rel=\"noopener\">CVE-2020-36692<\/a> is a medium-severity cross-site scripting (XSS) vulnerability in the report scheduler. An attacker could exploit it to execute JavaScript code in the victim\u2019s browser.<\/span><\/p><p><span style=\"font-weight: 400;\">Sophos patched the three vulnerabilities in <\/span><a href=\"https:\/\/wsa.sophos.com\/docs\/ws1000\/ws1000\/concepts\/ReleaseNotes_4.3.10.4.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Sophos Web Appliance 4.3.10.4<\/span><\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d47b516 elementor-widget elementor-widget-spacer\" data-id=\"d47b516\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eef6a9a elementor-widget elementor-widget-menu-anchor\" data-id=\"eef6a9a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"CVE-2023-29017-VM2-JavaScript-Bug\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dcb4099 elementor-widget elementor-widget-heading\" data-id=\"dcb4099\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">CVE-2023-29017: VM2 JavaScript Bug<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-971e64a elementor-widget elementor-widget-text-editor\" data-id=\"971e64a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-29017\" target=\"_blank\" rel=\"noopener\">CVE-2023-29017<\/a> is a critical vulnerability in the VM2 library, a JavaScript sandbox that is used by multiple software to run code securely in a virtualized environment. Exploiting it can lead to bypassing sandbox protections and gaining remote code execution on the host. A <\/span><a href=\"https:\/\/gist.github.com\/seongil-wi\/2a44e082001b959bfe304b62121fb76d\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">proof of concept<\/span><\/a><span style=\"font-weight: 400;\"> has been released for this bug\u2019s exploitation.<\/span><\/p><p><strong>Users of the VM2 library should immediately <a href=\"https:\/\/github.com\/patriksimek\/vm2\/security\/advisories\/GHSA-7jxr-cg7f-gpgv\" target=\"_blank\" rel=\"noopener\">patch<\/a> this vulnerability.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-551aab8 elementor-widget elementor-widget-spacer\" data-id=\"551aab8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3e38b31 elementor-widget elementor-widget-menu-anchor\" data-id=\"3e38b31\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Multiple-Vulnerabilities-in-CISCO\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b359e43 elementor-widget elementor-widget-heading\" data-id=\"b359e43\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Multiple Vulnerabilities in CISCO<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f6632d8 elementor-widget elementor-widget-text-editor\" data-id=\"f6632d8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong><span style=\"color: #000000;\">There are multiple vulnerabilities in CISCO:<\/span><\/strong><\/p><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-20102\" target=\"_blank\" rel=\"noopener\">CVE-2023-20102<\/a> is an insufficient sanitization of user-provided data vulnerability. An authenticated, remote attacker could send crafted HTTP requests to an affected device to achieve arbitrary code execution.<\/span><\/p><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-20122\" target=\"_blank\" rel=\"noopener\">CVE-2023-20122<\/a> is caused by improper validation of parameters. An authenticated, local attacker could exploit the issue by sending crafted CLI commands, allowing them to escape the restricted shell and gain root privileges on the operating system.<\/span><\/p><p><a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-adeos-MLAyEcvk\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2023-20121<\/span><\/a><span style=\"font-weight: 400;\"> is another improper validation of parameters flaw that impacts the restricted shell of Evolved Programmable Network Manager (EPNM), ISE, and Prime Infrastructure. It requires administrator privileges exploitation.<\/span><\/p><p><a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-expressway-overwrite-3buqW8LH\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2022-20812<\/span><\/a><span style=\"font-weight: 400;\"> impacts the cluster database API of the affected products and allows an authenticated, remote attacker to overwrite files on the affected device with root privileges.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-20117\" target=\"_blank\" rel=\"noopener\">CVE-2023-20117<\/a> and <a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-20128\" target=\"_blank\" rel=\"noopener\">CVE-2023-20128<\/a> are high-severity vulnerabilities that impact Small Business RV320 and RV325 routers. They could allow an authenticated, remote attacker to execute arbitrary commands on the affected devices.Since the vulnerabilities are in\u00a0 end-of-life (EoL) devices, CISCO has not released patches for them.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-80e7c9b elementor-widget elementor-widget-spacer\" data-id=\"80e7c9b\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-291a964 elementor-widget elementor-widget-menu-anchor\" data-id=\"291a964\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Apple-Zero-Days\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6edb733 elementor-widget elementor-widget-heading\" data-id=\"6edb733\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Apple Zero-Days<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ce78666 elementor-widget elementor-widget-text-editor\" data-id=\"ce78666\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-28206\" target=\"_blank\" rel=\"noopener\">CVE-2023-28206<\/a> is an IOSurfaceAccelerator out-of-bounds write that could lead to corruption of data, a crash, or code execution. Attackers use a maliciously crafted app to execute arbitrary code with kernel privileges on targeted devices.<\/span><\/p><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-28205\" target=\"_blank\" rel=\"noopener\">CVE-2023-28205<\/a>\u00a0 is a WebKit use after free weakness that allows data corruption or arbitrary code execution when reusing freed memory. Attackers can exploit this to execute code remotely.<\/span><\/p><p><strong>Apple <a href=\"https:\/\/support.apple.com\/en-us\/HT213720\" target=\"_blank\" rel=\"noopener\">fixed<\/a> these two zero-day vulnerabilities and is urging its customers to patch them.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c15d43 elementor-widget elementor-widget-spacer\" data-id=\"6c15d43\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c9e83b8 elementor-widget elementor-widget-menu-anchor\" data-id=\"c9e83b8\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Critical-Vulnerabilities-in-SAP\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ac6ece elementor-widget elementor-widget-heading\" data-id=\"5ac6ece\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Critical Vulnerabilities in SAP<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-216a5bb elementor-widget elementor-widget-text-editor\" data-id=\"216a5bb\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">SAP <\/span><a href=\"https:\/\/www.sap.com\/documents\/2022\/02\/fa865ea4-167e-0010-bca6-c68f7e60039b.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">addressed<\/span><\/a><span style=\"font-weight: 400;\"> several vulnerabilities in their products with fixes. Three of the critical ones are:<\/span><\/p><p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-27267\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2023-27267<\/span><\/a><span style=\"font-weight: 400;\">: An insufficient input validation and missing authentication issue impacting the OSCommand Bridge of SAP Diagnostics Agent. It allows an attacker to execute scripts on connected agents and fully compromise the system.\u00a0<\/span><\/p><p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-28765\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2023-28765<\/span><\/a><span style=\"font-weight: 400;\">: Another critical flaw that affects SAP BusinessObjects Business Intelligence Platform (Promotion Management). It allows attackers with basic privileges to gain access to the lcmbiar file and decrypt it. Attackers will also be able to access the platforms users\u2019 passwords and take over their accounts to perform additional malicious actions.<\/span><\/p><p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-29186\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2023-29186<\/span><\/a><span style=\"font-weight: 400;\">: A directory traversal flaw impacting SAP NetWeaver. It allows an attacker to upload and overwrite files on the vulnerable SAP server.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8242390 elementor-widget elementor-widget-spacer\" data-id=\"8242390\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f92a500 elementor-widget elementor-widget-menu-anchor\" data-id=\"f92a500\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"CVE-2023-28252-Windows-Common-Log-File-System-Vulnerability\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d4994a elementor-widget elementor-widget-heading\" data-id=\"4d4994a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">CVE-2023-28252: Windows Common Log File System Vulnerability<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d9a46d9 elementor-widget elementor-widget-text-editor\" data-id=\"d9a46d9\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\"><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-28252\" target=\"_blank\" rel=\"noopener\">CVE-2023-28252<\/a> impacts all supported versions of Windows servers and clients, and it can be exploited by local attackers in simple attacks without requiring any user interaction. If successfully exploited, threat actors can obtain SYSTEM privileges and completely compromise targeted Windows systems. As part of this month&#8217;s Patch Tuesday, Microsoft has <\/span><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-28252\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">fixed<\/span><\/a><span style=\"font-weight: 400;\"> this zero-day vulnerability.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Since June 2022, the Nokoyawa ransomware gang has employed other exploits that target the Common Log File System (CLFS) driver, and these exploits have similar yet distinct features that connect them to a single exploit developer. The group has utilized at least five additional CLFS exploits to attack various industries, such as retail and wholesale, energy, manufacturing, healthcare, and software development, among others.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-053117d elementor-widget elementor-widget-spacer\" data-id=\"053117d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f15de8a elementor-widget elementor-widget-menu-anchor\" data-id=\"f15de8a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Microsoft-Patch-Tuesday\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3882957 elementor-widget elementor-widget-heading\" data-id=\"3882957\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Microsoft Patch Tuesday<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-171c05f elementor-widget elementor-widget-text-editor\" data-id=\"171c05f\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span>Microsoft&#8217;s <\/span><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/releaseNote\/2023-Apr\" target=\"_blank\" rel=\"noopener\"><span>April 2023 Patch Tuesday<\/span><\/a><span> has arrived, and it includes fixes for 97 security flaws, one of which is a zero-day vulnerability. The most severe of these vulnerabilities are remote code execution vulnerabilities.<\/span><\/p><p><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-28252\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2023-28252<\/span><\/a><span style=\"font-weight: 400;\">, the zero-day vulnerability impacted all supported versions of Windows servers and clients, and it could be exploited by local attackers in low-complexity attacks without user interaction.<\/span><\/p><p><span style=\"font-weight: 400;\">In addition to the zero-day fix, Microsoft has also patched 96 other security bugs, 45 of which were remote code execution vulnerabilities. Among these are vulnerabilities in Microsoft Office, Word, and Publisher, tracked as CVE-2023-28285, CVE-2023-28295, CVE-2023-28287, and CVE-2023-28311. Since these types of vulnerabilities are commonly used in phishing campaigns, threat actors are expected to investigate ways to exploit them for distributing malware. However, there are no reports of active exploitation.<\/span><\/p><p><strong>Users are advised to install these updates as soon as possible to protect their systems from potential exploitation.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d0455a0 elementor-widget elementor-widget-spacer\" data-id=\"d0455a0\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b9082b6 elementor-widget elementor-widget-menu-anchor\" data-id=\"b9082b6\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"menu-anchor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-menu-anchor\" id=\"Vulnerabilities-in-SharePoint\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-efaa931 elementor-widget elementor-widget-heading\" data-id=\"efaa931\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities in SharePoint<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a124639 elementor-widget elementor-widget-text-editor\" data-id=\"a124639\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Recently, a proof of concept for three Microsoft SharePoint Web Parts property traversal vulnerabilities was released. The analysis revealed that the root cause of these vulnerabilities lies in the Parameter Class named Microsoft.SharePoint.WebPartPages.DataFormParameter. To prevent exposure, the presence of the character \u201c.\u201d needs to be checked and blocked in the XML attributes. Failure to do so can result in property traversal during the rendering process, which can be exploited by attackers. The three vulnerabilities are <\/span><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2023-21742\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2023\u201321742<\/span><\/a><span style=\"font-weight: 400;\">, <\/span><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2022-38053\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE-2022-38053<\/span><\/a><span style=\"font-weight: 400;\">, and <\/span><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-21717\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CVE- 2023-21717<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9c3359d elementor-widget elementor-widget-spacer\" data-id=\"9c3359d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5661ac2 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5661ac2\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-12cd24e\" data-id=\"12cd24e\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6a79af4 elementor-widget elementor-widget-spacer\" data-id=\"6a79af4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8edd1c elementor-widget elementor-widget-text-editor\" data-id=\"f8edd1c\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #000000;\">Follow our weekly blog and podcast to get proactive alerts on trending threats.<\/span><\/strong><\/p><p style=\"text-align: center;\"><strong>Leverage our expertise and manage your threats continuously to stay safe from attackers. <\/strong><a href=\"\/contact-us\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Talk to Us!<\/span><\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-56b9a97 elementor-widget elementor-widget-spacer\" data-id=\"56b9a97\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>We bring you threats that are currently trending as well as new vulnerabilities that hackers are exploiting.<\/p>\n","protected":false},"author":1,"featured_media":13471,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[80,146],"tags":[172,618,89,220,449,93,644,645,642,643,139,424,108],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/17231"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/comments?post=17231"}],"version-history":[{"count":57,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/17231\/revisions"}],"predecessor-version":[{"id":17960,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/17231\/revisions\/17960"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/13471"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=17231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/categories?post=17231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/tags?post=17231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}