cve-2022-30190 – PossibleThreat Articles

MalwareBytes Security

2022’s most routinely exploited vulnerabilities—history repeats

August 7, 2023 0 Comments atlassian, cve-2021-13379, cve-2021-26084, cve-2021-31207, cve-2021-34473, cve-2021-34523, cve-2021-40539, cve-2021-44228, cve-2022-1388, cve-2022-22954, cve-2022-22960, cve-2022-26134, cve-2022-30190, Exploits and vulnerabilities, follina, log4shell, news, proxyshell, zoho manageengine

Categories: Exploits and vulnerabilities

Categories: News

Tags: Zoho ManageEngine

Tags: CVE-2021-40539

Tags: Log4Shell

Tags: CVE-2021-44228

Tags: CVE-2021-13379

Tags: ProxyShell

Tags: CVE-2021-34473

Tags: CVE-2021-31207

Tags: CVE-2021-34523

Tags: CVE-2021-26084

Tags: Atlassian

Tags: CVE-2022-22954

Tags: CVE-2022-22960

Tags: CVE-2022-26134

Tags: CVE-2022-1388

Tags: CVE-2022-30190

Tags: Follina

What can the routinely exploited vulnerabilities of 2022 tell us, and what do we think will make it on to next year’s list?

(Read more…)

The post 2022’s most routinely exploited vulnerabilities—history repeats appeared first on Malwarebytes Labs.

Security Sophos

S3 Ep87: Follina, AirTags, ID theft and the Law of Big Numbers [Podcast]

June 16, 2022 0 Comments Apple, cve-2022-30190, Exploit, follina, Microsoft, phishing, Podcast, SMS, vishing, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 16 Jun 2022 16:52:55 +0000

Lastest epsiode – listen now!

MalwareBytes Security

Update now! Microsoft patches Follina, and many other security updates

June 15, 2022 0 Comments Adobe, atlassian, citrix, confluence, cve-2022-26397, cve-2022-30136, cve-2022-30139, cve-2022-30163, cve-2022-30190, drupal, Exploits and vulnerabilities, follina, gitlab, Google, Hyper-V, ldap, msdt, nfs, Patch Tuesday, sap, synlapse

Credit to Author: Pieter Arntz| Date: Wed, 15 Jun 2022 13:17:05 +0000

Patch Tuesday for June 2022 brought a fix for Follina and many other security vulnerabilities. Time to figure out what needs to be prioritized.

The post Update now! Microsoft patches Follina, and many other security updates appeared first on Malwarebytes Labs.

Independent Krebs Security

Microsoft Patch Tuesday, June 2022 Edition

June 14, 2022 0 Comments amit yoran, azure synapse, cve-2022-30190, follina, kevin beaumont, mayuresh dani, microsoft patch tuesday june 2022, microsoft support diagnostics tool, msdt, orca security, tenable, Time to Patch, trend micro zero day initiative

Credit to Author: BrianKrebs| Date: Wed, 15 Jun 2022 04:52:30 +0000

Microsoft on Tuesday released software updates to fix 60 security vulnerabilities in its Windows operating systems and other software, including a zero-day flaw in all supported Microsoft Office versions on all flavors of Windows that’s seen active exploitation for at least two months now. On a lighter note, Microsoft is officially retiring its Internet Explorer (IE) web browser, which turns 27 years old this year.

Security Sophos

Follina gets fixed – but it’s not listed in the Patch Tuesday patches!

June 14, 2022 0 Comments cve-2022-30190, follina, Microsoft, Patch Tuesday, vulnerability

Credit to Author: Paul Ducklin| Date: Wed, 15 Jun 2022 01:20:14 +0000

We tried it out to make sure, so you don’t have to.

Security Sophos

You’re invited! Join us for a live walkthrough of the “Follina” story…

June 13, 2022 0 Comments cve-2022-30190, follina, malware, security leadership, vulnerability, webinar

Credit to Author: Paul Ducklin| Date: Mon, 13 Jun 2022 16:28:17 +0000

Live demo, plain English, no sales pitch, just a chance to watch an attack dissected in safety. Join us if you can!

Security Sophos

‘Follina’ Word doc taps previously unknown Microsoft Office vulnerability

June 8, 2022 0 Comments cve-2022-30190, featured, follina, Microsoft Office, ms-msdt, msdt, msdt.exe, SophosLabs Uncut, threat research, vulnerability, zero day

Credit to Author: Andrew Brandt| Date: Tue, 31 May 2022 00:41:42 +0000

MSDT.exe misuse in May makes for Memorial Day Monday mayhem

Security Sophos

S3 Ep85: Now THAT’S what I call a Microsoft Office exploit! [Podcast]

June 2, 2022 0 Comments cve-2022-30190, follina, Naked Security Podcast, phishing, Podcast, Privacy, smishing, SMS, vulnerability, webcam

Credit to Author: Paul Ducklin| Date: Thu, 02 Jun 2022 15:37:11 +0000

Latest episode – listen now!

MalwareBytes Security

FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day

June 1, 2022 0 Comments cve-2022-30190, Exploits and vulnerabilities, follina, zero day

Credit to Author: Threat Intelligence Team| Date: Wed, 01 Jun 2022 16:36:44 +0000

FAQ for the new Follina zero-day vulnerability. What you can do to protect your computers right now.

The post FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day appeared first on Malwarebytes Labs.

Security Sophos

Mysterious “Follina” zero-day hole in Office – here’s what to do!

May 31, 2022 0 Comments cve-2022-30190, follina, Microsoft, ms-msdt, msdt, office, security threats, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Mon, 30 May 2022 23:01:55 +0000

News has emerged of a “feature” in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn’t help!

← Previous