<\/p>\n
Highlights of Patch Watch Issue 6<\/strong><\/span><\/span><\/p>\n\nMicrosoft<\/strong> November patch Tuesday fixed 112 security bugs<\/strong><\/a>.<\/span><\/span><\/li>\n19<\/strong> Vendors, including Adobe, Apple, Cisco, Citrix, Chrome, Microsoft, Mozilla, Palo Alto, Checkpoint, Dell, and other popular vendors, have released 525 security patches<\/strong>.<\/a> (Out of these, 17 CVEs have known exploits)<\/span><\/span><\/li>\nCISA has issued a security alert for 44<\/strong> Vulnerabilities<\/a>.<\/span><\/span><\/li>\n80<\/strong> Old vulnerabilities have been fixed this week.<\/span><\/span><\/a><\/li>\n<\/ul>\n\n\n<\/a>Microsoft fixed 112 Security bugs<\/strong> in the November patch Tuesday.<\/span><\/span><\/li>\n<\/ol>\n<\/p>\n\n24 CVEs<\/strong> are associated with Remote Code Execution<\/strong> hence patching these would be optimum.<\/span><\/span><\/li>\nMicrosoft has also changed its security advisories by limiting the disclosing information for each bug.<\/span><\/span><\/li>\nOf these, 17<\/strong> are critical, 93 are as important, and two are low in severity.<\/span><\/span><\/li>\nAmong the bugs patched, zero-day bug – CVE-2020-17087<\/a>, an actively exploitable vulnerability with PE capabilities.<\/span><\/span><\/li>\nCVE-2020-17087<\/a> exists in Windows Kernel Cryptography Driver which constitutes a locally accessible attack surface.<\/span><\/span><\/li>\nWhen CVE-2020-15999 (type of memory-corruption vulnerability) and CVE-2020-17087<\/a> are linked together would allow an attacker to break out of Google Chrome\u2019s sandbox.\u00a0<\/span><\/span><\/li>\n<\/ul>\n\n<\/a>We analyzed 525 vulnerabilities<\/strong> and found that \u2013<\/span><\/span><\/li>\n<\/ol>\n<\/span><\/span><\/p>\n\n17 CVEs<\/strong> have known exploits<\/strong><\/span><\/span><\/li>\n1 CVE<\/strong> is associated with Sea turtle APT group<\/strong><\/span><\/span><\/li>\n1 CVE<\/strong> has ties with Satan Ransomware<\/strong><\/span><\/span><\/li>\n508<\/strong> are yet to be weaponized<\/span><\/span><\/li>\nExploitable vulnerabilities are correlated with RCE, DoS, WEB APP, Local, PE, and others.<\/strong><\/span><\/span><\/li>\n<\/ul>\n\n<\/a>Security patches for 80 old vulnerabilities<\/strong> have been released. These vulnerabilities range from years – 2015<\/strong> to 2019<\/strong>.<\/span><\/span><\/li>\n<\/ol>\n<\/p>\n\nOut of 80 CVEs, CVE-2018-7600<\/strong> is associated with both Sea turtle APT group and Satan Ransomware and has a CVSS V3 Score of 7.5<\/strong>.<\/span><\/span><\/li>\n<\/ul>\n<\/iframe><\/p>\n<p style=\"margin-left: 18.0pt;\"><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"CISA\" name=\"CISA\"><\/a>CISA has issued <strong>47<\/strong> security alerts for this week, including <strong>7 CVEs<\/strong> rating high severity, <strong>20<\/strong>\u00a0<strong>CVEs<\/strong> of medium, <strong>9<\/strong> of low severity, and <strong>8 CVEs<\/strong> with unknown severity.<\/span><\/span><\/li>\n<\/ol>\n<p><img decoding=\"async\" style=\"width: 600px; height: 463px;\" src=\"\/wp-content\/uploads\/2022\/10\/cisa-alerts-charts1.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrfgJFDFSnWRAQ9d?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA Alert<\/strong><strong>s <\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">According to a study by the University of Maryland, a cyber attack occurs once every 39 seconds (2,244 times per day). Cyber Hygiene is the only arsenal that can be employed by security teams to combat threat actors who mount bold and daring attacks on organizations every day.<\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr577Xc2w7o8Ul6f?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrrSvJkEoFd6FkzO?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4: Vulnerabilities Yet to be\u00a0Weaponized<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Organizations today working with massive data sets are undoubtedly challenged with securely managing those data. So, urge patching and prevent your organization from falling victim to an attack.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Highlights of Patch Watch Issue 6 Microsoft November patch Tuesday fixed 112 security bugs. 19 Vendors, including Adobe, Apple, Cisco, Citrix, Chrome, Microsoft, Mozilla, Palo Alto, Checkpoint, Dell, and other popular vendors, have released 525 security patches. (Out of these, 17 CVEs have known exploits) CISA has issued a security alert for 44 Vulnerabilities. 80 […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8765"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8765"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
<\/span><\/span><\/p>\n\n17 CVEs<\/strong> have known exploits<\/strong><\/span><\/span><\/li>\n1 CVE<\/strong> is associated with Sea turtle APT group<\/strong><\/span><\/span><\/li>\n1 CVE<\/strong> has ties with Satan Ransomware<\/strong><\/span><\/span><\/li>\n508<\/strong> are yet to be weaponized<\/span><\/span><\/li>\nExploitable vulnerabilities are correlated with RCE, DoS, WEB APP, Local, PE, and others.<\/strong><\/span><\/span><\/li>\n<\/ul>\n\n<\/a>Security patches for 80 old vulnerabilities<\/strong> have been released. These vulnerabilities range from years – 2015<\/strong> to 2019<\/strong>.<\/span><\/span><\/li>\n<\/ol>\n<\/p>\n\nOut of 80 CVEs, CVE-2018-7600<\/strong> is associated with both Sea turtle APT group and Satan Ransomware and has a CVSS V3 Score of 7.5<\/strong>.<\/span><\/span><\/li>\n<\/ul>\n<\/iframe><\/p>\n<p style=\"margin-left: 18.0pt;\"><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"CISA\" name=\"CISA\"><\/a>CISA has issued <strong>47<\/strong> security alerts for this week, including <strong>7 CVEs<\/strong> rating high severity, <strong>20<\/strong>\u00a0<strong>CVEs<\/strong> of medium, <strong>9<\/strong> of low severity, and <strong>8 CVEs<\/strong> with unknown severity.<\/span><\/span><\/li>\n<\/ol>\n<p><img decoding=\"async\" style=\"width: 600px; height: 463px;\" src=\"\/wp-content\/uploads\/2022\/10\/cisa-alerts-charts1.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrfgJFDFSnWRAQ9d?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA Alert<\/strong><strong>s <\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">According to a study by the University of Maryland, a cyber attack occurs once every 39 seconds (2,244 times per day). Cyber Hygiene is the only arsenal that can be employed by security teams to combat threat actors who mount bold and daring attacks on organizations every day.<\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr577Xc2w7o8Ul6f?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrrSvJkEoFd6FkzO?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4: Vulnerabilities Yet to be\u00a0Weaponized<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Organizations today working with massive data sets are undoubtedly challenged with securely managing those data. So, urge patching and prevent your organization from falling victim to an attack.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Highlights of Patch Watch Issue 6 Microsoft November patch Tuesday fixed 112 security bugs. 19 Vendors, including Adobe, Apple, Cisco, Citrix, Chrome, Microsoft, Mozilla, Palo Alto, Checkpoint, Dell, and other popular vendors, have released 525 security patches. (Out of these, 17 CVEs have known exploits) CISA has issued a security alert for 44 Vulnerabilities. 80 […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8765"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8765"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/iframe><\/p>\n<p style=\"margin-left: 18.0pt;\"><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<ol start=\"4\">\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a id=\"CISA\" name=\"CISA\"><\/a>CISA has issued <strong>47<\/strong> security alerts for this week, including <strong>7 CVEs<\/strong> rating high severity, <strong>20<\/strong>\u00a0<strong>CVEs<\/strong> of medium, <strong>9<\/strong> of low severity, and <strong>8 CVEs<\/strong> with unknown severity.<\/span><\/span><\/li>\n<\/ol>\n<p><img decoding=\"async\" style=\"width: 600px; height: 463px;\" src=\"\/wp-content\/uploads\/2022\/10\/cisa-alerts-charts1.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrfgJFDFSnWRAQ9d?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA Alert<\/strong><strong>s <\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">According to a study by the University of Maryland, a cyber attack occurs once every 39 seconds (2,244 times per day). Cyber Hygiene is the only arsenal that can be employed by security teams to combat threat actors who mount bold and daring attacks on organizations every day.<\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr577Xc2w7o8Ul6f?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrrSvJkEoFd6FkzO?backgroundColor=purple&viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4: Vulnerabilities Yet to be\u00a0Weaponized<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Organizations today working with massive data sets are undoubtedly challenged with securely managing those data. So, urge patching and prevent your organization from falling victim to an attack.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Team CSW<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Highlights of Patch Watch Issue 6 Microsoft November patch Tuesday fixed 112 security bugs. 19 Vendors, including Adobe, Apple, Cisco, Citrix, Chrome, Microsoft, Mozilla, Palo Alto, Checkpoint, Dell, and other popular vendors, have released 525 security patches. (Out of these, 17 CVEs have known exploits) CISA has issued a security alert for 44 Vulnerabilities. 80 […]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8765"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8765"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"http:\/\/webdev.securin.xyz\/wp-content\/uploads\/2022\/10\/patchwatch-highlights6.png\")
<\/p>\n<\/p>\n![\"\"](\"\/wp-content\/uploads\/2022\/10\/microsoft-patch-charts1.png\")
<\/p>\n![\"\"](\"\/wp-content\/uploads\/2022\/10\/analysis-of-weaponization.jpg\")
<\/span><\/span><\/p>\n![\"\"](\"\/wp-content\/uploads\/2022\/10\/old-vulnerabilties-1.png\")
<\/p>\n