Ransomwarecritical

Week in review: Disrupted Cyclops Blink botnet, public software apps at risk, Patch Tuesday forecast

Help Net Securityby @helpnetsecurityApr 10, 2022 · 00:00 UTC (Apr 10, 2022)5 min read2

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22965 CVE-2021-44228

Tags: cve-2022-22965 cve-2021-44228 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2022-22965	Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs	9.8	100%	KEVPoC	Apr 1, 2022 KEV Apr 4, 2022

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: April 2022 Patch Tuesday forecast: Spring is in the air (and vulnerable) March Patch Tuesday releases followed in the footsteps of February with low numbers of CVEs reported and resolved, and all updates rated as important except one critical update for Microsoft Exchange Server.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.