{"id":8363,"date":"2022-06-24T10:54:36","date_gmt":"2022-06-24T10:54:36","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8363"},"modified":"2023-02-17T13:24:17","modified_gmt":"2023-02-17T20:24:17","slug":"dhs-cisa-kevs-weekly-edition-8-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/dhs-cisa-kevs-weekly-edition-8-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 8: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">This is the 8th edition of our patch watch blogs. We bring this to you so you can be aware of the vulnerabilities you need to patch in that week. These are recommended by the\u00a0 US Cybersecurity and Infrastructure Security Agency (CISA)\u00a0 and this week, (June 20 to June 26, 2022) 36 vulnerabilities need to be patched.<\/p>\n<p dir=\"ltr\">The federal agencies are required to meet this deadline and ensure that the patches are deployed and their systems protected against malicious attacks.<\/p>\n<p>We analysed the CISA Known Exploited Vulnerabilities (KEVs) and found that &#8211;<\/p>\n<p><img decoding=\"async\" style=\"width: 750px; height: 370px;\" src=\"\/wp-content\/uploads\/2022\/10\/highlight-image-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Of the 36 KEVs, 35 CVEs are old vulnerabilities dating from 2006 to 2021, with a patch deadline of June 22, 2022.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 182px;\" src=\"\/wp-content\/uploads\/2022\/10\/year-wise-breakdown-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">CVEs with a patch deadline of June 22, 2022 are associated with 7 prominent vendors such as Google, Microsoft, CISCO, etc. Here\u2019s the entire list of vendors:<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 417px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendors-affected-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">All the vulnerabilities lie in either the high or critical range and need to be patched without delay.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 437px;\" src=\"\/wp-content\/uploads\/2022\/10\/severity-scores.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p>The following CWEs are associated with a number of vulnerabilities that need to be patched this week.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 578px;\" src=\"\/wp-content\/uploads\/2022\/10\/software-weakness.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrOMYJoRi8SWQvwF?backgroundColor=green&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\">\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Table: DHS CISA KEVs<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\">This week, the patches are recommended for very critical vulnerabilities and based on our analyzes, they are present in major vendors such as Google, Microsoft, etc. Since they are widely used everywhere, the systems are under imminent attack. Therefore, it is essential that public and private organizations dedicate resources to identify and patch these vulnerabilities as soon as possible.<\/p>\n<p>To know more about our CISA known exploited vulnerabilities catalog analysis and vulnerabilities to be patched in June Month. <a href=\"https:\/\/cybersecurityworks.com\/blog\/cisa\/cisa-releases-a-directive-asking-organizations-to-patch-known-exploited-vulnerabilities.html\">Click here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is the 8th edition of our patch watch blogs. We bring this to you so you can be aware of the vulnerabilities you need to patch in that week. These are recommended by the\u00a0 US Cybersecurity and Infrastructure Security Agency (CISA)\u00a0 and this week, (June 20 to June 26, 2022) 36 vulnerabilities need to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,288],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8363"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8363"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}