Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum
ID: a54b83c3-7920-562c-9008-c7891e1d5203
STIX ID: report--a54b83c3-7920-562c-9008-c7891e1d5203
Feed Name: The Register (Security)
Threat Score
CISA added four Microsoft vulnerabilities (including an Exchange deserialization RCE and an old VBA library-loading RCE) and two Adobe flaws to its Known Exploited Vulnerabilities catalog, warning of active exploitation and imposing a federal patching deadline; Microsoft has confirmed at least one of the Exchange issues has been abused in attacks by criminal group Storm-1175, which has been observed gaining access and deploying Medusa ransomware.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.