{"id":8325,"date":"2022-08-19T09:55:08","date_gmt":"2022-08-19T09:55:08","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8325"},"modified":"2023-02-17T13:29:40","modified_gmt":"2023-02-17T20:29:40","slug":"dhs-cisa-kevs-weekly-edition-15-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/dhs-cisa-kevs-weekly-edition-15-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 15: Patch Before You Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">In this blog we will be taking a look at the CVEs that need to be patched by August 25, 2022. CISA added the Zimbra Collaborator vulnerability (CVE-2022-27924) to the KEV list on August 4, 2022, and has instructed organizations to patch it by August 25. This indicates that this CVE is highly exploited by threat actors and needs attention immediately. The Atlassian Confluence vulnerability (CVE-2022-26138) is also a critical CVE that needs to be patched as soon as possible. Let\u2019s look at the analysis of all the vulnerabilities below:<\/p>\n<p><img decoding=\"async\" style=\"width: 750px; height: 410px;\" src=\"\/wp-content\/uploads\/2022\/09\/highlight-image.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Of the 5 KEVs, 2 vulnerabilities were discovered in 2017. The oldest vulnerability dates back to 2014.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 426px;\" src=\"\/wp-content\/uploads\/2022\/09\/patchwatch-3-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">Microsoft has the most number of vulnerabilities (3) that need to be patched by August 25, 2022. The other vulnerabilities are in Zimbra and Atlassian Confluence servers which have also been targeted recently.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 393px;\" src=\"\/wp-content\/uploads\/2022\/09\/patchwatch-4.png\" alt=\"\" \/><\/p>\n<h2>Severity Scores<\/h2>\n<p dir=\"ltr\">Patching these vulnerabilities is of high priority, as most of them rank high and critical on the CVSS scoring scale.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 528px;\" src=\"\/wp-content\/uploads\/2022\/09\/patchwatch-2-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p dir=\"ltr\">The following CWEs have caused the 5 vulnerabilities that need to be patched this week.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 583px;\" src=\"\/wp-content\/uploads\/2022\/09\/patchwatch-5-1.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">One CVE does not have any associated CWE.\n<\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr3u2CVefwQQwvAX?backgroundColor=blue&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><strong>Table: DHS CISA KEVs<\/strong><\/p>\n<p dir=\"ltr\">The CVEs recommended by CISA to be patched by August 25, are all trending right now, which means that hackers are actively targeting them. The Atlassian Confluence vulnerability has been making waves in the news because of the severity and frequency of exploitation. BlackTech, Tropic Trooper, Patchwork, and Cobalt Group are some of the APT groups exploiting these vulnerabilities.<\/p>\n<p dir=\"ltr\">We urge organizations to implement patches for these CVEs at the earliest.<\/p>\n<p dir=\"ltr\">\n<p style=\"text-align: center;\"><strong>For the latest news regarding vulnerabilities that are exploited and critical threats, read our blog on <a href=\"https:\/\/cybersecurityworks.com\/blog\/cyber-risk\/csws-threat-intelligence-august-15-2022-august-19-2022-1.html\">Weekly Threat Intelligence<\/a>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this blog we will be taking a look at the CVEs that need to be patched by August 25, 2022. CISA added the Zimbra Collaborator vulnerability (CVE-2022-27924) to the KEV list on August 4, 2022, and has instructed organizations to patch it by August 25. This indicates that this CVE is highly exploited by [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,289,290,288,291],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8325"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8325"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}