The US government Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows flaw to the Known Exploited Vulnerabilities Catalog. CISA Has Added One Known Exploited Vulnerability to Catalog | CISA
Interesting reading for the weekend
This is a weighty report from Microsoft looking at the state of cyber-attacks and responses – it is worth reading: Microsoft Digital Defense Report 2022 Your takeaway from this is – if you are better informed you can make better decisions on how to prepare your cyber security responses.
VMware, Citrix and Microsoft security advisories from CISA
The US government Cybersecurity and Infrastructure Security Agency (CISA) has issued the following security advisories: Citrix Releases Security Updates for ADC and Gateway | CISA VMware Releases Security Updates | CISA This is the advisory for Microsoft’s Patch Tuesday: Microsoft Releases November 2022 Security Updates | CISA
Yesterday was Patch Tuesday
It comes round every month – make sure your team has updated. Here is a link to Lawrence Abrams’ excellent roundup of the updates and patches from Microsoft at Bleeping Computer. It includes details of the zero-day vulnerabilities patched: Microsoft November 2022 Patch Tuesday fixes 6 exploited zero-days, 68 flaws …
CISA adds seven vulnerabilities to the Known Exploited Vulnerabilities Catalog
The US government Cybersecurity and Infrastructure Security Agency has issued security advisories for Microsoft and Samsung products: CISA Adds Seven Known Exploited Vulnerabilities to Catalog | CISA