The US Government, Cybersecurity and Infrastructure Security Agency (CISA) has added several new Microsoft Windows, vulnerabilities to it’s database. These all need patches – so again it is a good time to check that your “auto-updating” is working or time to get an Octagon IT monitoring package and let experts monitor the situation for you and report when updates are avoided, or even force, those essential updates across your organisation.
CISA Adds Seven Known Exploited Vulnerabilities to Catalog | CISA
There is a Linux privilege escalation vulnerability on the list as well – patches are needed for that as well. Improving the user rights of a lowly account to that of an administrator is one of the “holy grails” of a hacker – so patch or lose it.