Microsoft's February Security Update

Arctic Wolf summarizes Microsoft’s February 2023 Security Update that patches multiple high- and critical-severity vulnerabilities across many Windows versions and Exchange Server (notably CVE-2023-21689/21690/21692, CVE-2023-23376 and CVE-2023-21706/21707/21529/21710). Several RCEs and an elevation-of-privilege are called out (CVSS up to 9.8), at least one issue has confirmed in-the-wild exploitation, and the bulletin strongly recommends applying the listed KB updates and following change-management best practices to mitigate ransomware and other exploit risks.