Data breachcritical

Week in review: ChatGPT cybersecurity, critical RCE vulnerabilities found in git, Riot Games breached

Help Net Securityby @helpnetsecurityJan 29, 2023 · 00:00 UTC (Jan 29, 2023)4 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-42856 CVE-2022-31706 CVE-2022-31704 CVE-2022-31710 CVE-2022-31711 CVE-2022-34689

Tags: cve-2022-42856 cve-2022-31706 cve-2022-31704 cve-2022-31710 cve-2022-31711 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31706 +3 related CVEs CVE-2022-31704 CVE-2022-31710 CVE-2022-31711	The vRealize Log Insight contains a Directory Traversal Vulnerability	9.8 group max	87%		Jan 26, 2023
CVE-2022-34689	Windows CryptoAPI Spoofing Vulnerability	7.5	38%		Oct 11, 2022
CVE-2022-42856	Type Confusion in Apple WebKit (Safari/iOS/macOS/tvOS), Actively Exploited	8.8	9%	KEV	Dec 15, 2022 KEV Dec 14, 2022

From the original article

4 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: BSidesZG 2023: Strengthening the infosec community in Croatia’s capital In March 2023, Zagreb will be added to the (already long) list of cities where information security professionals and enthusiasts can share their knowledge with peers at a Security BSides conference.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.