Attackers are exploiting a new Windows zero-day security vulnerability, Microsoft says: Here's the fix.
Although exploiting CVE-2022-37969 requires access to the target system, and the ability to run code upon it, lowers the risk, it doesn't mitigate it to anything approaching zero. A threat actor will likely use malware that exploits a different vulnerability or a simple 'malicious link click' phishing attack to achieve this access.
Mike Walters, a cybersecurity executive at Action1, says that"since the vulnerability has low complexity and requires no user interaction, an exploit will likely soon be in the arsenal of both white hats and black hats.” It is therefore highly recommended that you patch this sooner rather than later.
Resumimos esta notícia para que você possa lê-la rapidamente. Se você se interessou pela notícia, pode ler o texto completo aqui. Consulte Mais informação: