{"id":8724,"date":"2021-02-03T10:40:21","date_gmt":"2021-02-03T17:40:21","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8724"},"modified":"2023-03-03T14:27:53","modified_gmt":"2023-03-03T21:27:53","slug":"jan-13-csw-patch-watch-security-updates","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/jan-13-csw-patch-watch-security-updates\/","title":{"rendered":"Jan 13: CSW Patch Watch &#038; Security Updates"},"content":{"rendered":"<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 750px; height: 329px;\" src=\"\/wp-content\/uploads\/2022\/10\/highlights-of-patch-watch-issue-102.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Highlights of Patch Watch Issue 10<\/strong><\/span><\/span><\/h2>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Findings\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">13 vendors, including Apple, Cisco, Adobe, Chrome, Mozilla, IBM, Microsoft, Checkpoint, RedHat, and others, have released patches and updates for 487 vulnerabilities.<\/span><\/span><\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Microsoft Patches\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Microsoft has pushed patches for 83 vulnerabilities.<\/span><\/span><\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#CISA\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">CISA issued a warning alert for 25 vulnerabilities.<\/span><\/span><\/a><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Old CVEs\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">358 Old vulnerabilities have been patched.<\/span><\/span><\/a><\/p>\n<\/li>\n<\/ul>\n<h3 dir=\"ltr\" role=\"presentation\"><strong><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"Findings\" name=\"Findings\"><\/a>We analyzed 487 vulnerabilities and found that \u2013<\/span><\/span><\/strong><\/h3>\n<ul style=\"margin-left: 40px;\">\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">2 CVEs are associated with APT Groups<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">5 CVEs are associated with 5 different Ransomware families.<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">9 CVEs have known exploits<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">478 CVEs are yet to be weaponized<\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 550px; height: 338px;\" src=\"\/wp-content\/uploads\/2022\/10\/weaponized-vulnerabilities-8.png\" alt=\"\" \/><\/span><\/span><\/p>\n<h3 dir=\"ltr\" role=\"presentation\"><strong><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"Microsoft Patches\" name=\"Microsoft Patches\"><\/a>Microsoft rolled out 83 security patches for January.<\/span><\/span><\/strong><\/h3>\n<ul style=\"margin-left: 40px;\">\n<li dir=\"ltr\" aria-level=\"1\">\n<h3 dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">10 CVEs are rated critical, and 73 are high.<\/span><\/span><\/h3>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">CVE-2021-1647 is a zero-day exploit with RCE capabilities.<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">This vulnerability existed within the Microsoft Malware Protection Engine version 1.1.17700.4 or later, a core component of Microsoft Defender that addresses malicious software.<\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 550px; height: 424px;\" src=\"\/wp-content\/uploads\/2022\/10\/microsoft-patches.png\" alt=\"\" \/><\/span><\/span><\/p>\n<h3 dir=\"ltr\" role=\"presentation\"><strong><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"CISA\" name=\"CISA\"><\/a>CISA has issued a warning alert for 25 vulnerabilities.<\/span><\/span><\/strong><\/h3>\n<ul style=\"margin-left: 40px;\">\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">2 CVEs have known exploits<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">CVE-2019-0708 is associated with Kelvin SecTeam APT Group and DoppelPaymer and Redkeeper ransomware families given the severity rating of 10.<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">4 CVEs are rated critical, and 2 are high.\u00a0<\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 550px; height: 380px;\" src=\"\/wp-content\/uploads\/2022\/10\/cisa-alerts-4.png\" alt=\"\" \/><\/span><\/span><\/p>\n<h3 dir=\"ltr\" role=\"presentation\"><strong><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"Old CVEs\" name=\"Old CVEs\"><\/a>358 Old vulnerabilities have been patched.<\/span><\/span><\/strong><\/h3>\n<ul style=\"margin-left: 40px;\">\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">2 CVEs are associated with Kelvin SecTeam and Lazarus APT Groups.<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">4 CVEs are associated with 5 Ransomware families such as Bitpaymer, Petya, Cerber, DoppelPaymer, and Redkeeper.<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">CISA has issued alerts for 24 vulnerabilities.<\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">4 CVEs are rated critical, and 2 are high.\u00a0<\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 550px; height: 384px;\" src=\"\/wp-content\/uploads\/2022\/10\/old-vulnerabilities-4.png\" alt=\"\" \/><\/span><\/span><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrZHuvAyw2XC3NmX?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\"><strong><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Table: January 2021\u00a0Patches<\/span><\/span><\/strong><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Organizations today need multi-faceted solutions combined with accurate data that factors in trending analytics and latest information. Keeping pace with a steady stream of patches is tough. Vendors patch thousands of vulnerabilities every week but what should you patch first and why? Why should some patches be prioritized and others not?<\/span><\/span><\/p>\n<p dir=\"ltr\"><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The need of the hour today is a dynamic attack surface management platform that integrates patch information prioritized by threat context so that organizations know why they should patch some vulnerabilities first.\u00a0<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Highlights of Patch Watch Issue 10 13 vendors, including Apple, Cisco, Adobe, Chrome, Mozilla, IBM, Microsoft, Checkpoint, RedHat, and others, have released patches and updates for 487 vulnerabilities. Microsoft has pushed patches for 83 vulnerabilities. CISA issued a warning alert for 25 vulnerabilities. 358 Old vulnerabilities have been patched. We analyzed 487 vulnerabilities and found [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8724"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8724"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}