Week in review: Microsoft fixes two actively exploited bugs, MSI private code signing keys leaked
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-24932+1 related CVE | Secure Boot Security Feature Bypass Vulnerability | 6.7 group max | 11% | ||
| CVE-2023-29336 | Use-after-free privilege escalation to SYSTEM in Microsoft Win32k | 7.8 | 41% | KEVPoC | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Dragos blocks ransomware attack, brushes aside extortion attempt A ransomware group has tried and failed to extort money from Dragos, the industrial cybersecurity firm has confirmed on Wednesday, and reassured that none of its systems or its Dragos Platform had been breached.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.