RansomwarecriticalExploited in the wild

Week in review: MS Exchange zero-days exploited, AD attack paths, developing secure APIs

Help Net Securityby @helpnetsecurityOct 2, 2022 · 00:00 UTC (Oct 2, 2022)4 min read3

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41040 CVE-2022-41082 CVE-2022-3236

Tags: cve-2022-41040 cve-2022-41082 cve-2022-3236 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-3236	Unauthenticated Code Injection RCE in Sophos Firewall (User Portal/Webadmin)	9.8	99%	KEV	Sep 23, 2022 KEV Sep 23, 2022
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022

From the original article

4 min read at helpnetsecurity.com

SpyCast is a cross-platform mDNS enumeration tool that can work either in active mode by recursively querying services or in passive mode by only listening to multicast packets.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.