Microsoft addresses 48 CVEs in its February 2022 Patch Tuesday release, including one zero-day vulnerability that was publicly disclosed, but not exploited in the wild. 0Critical 48Important 0Moderate 0Low Microsoft patched 48 CVEs in the February 2022 Patch Tuesday release, with all 48 rated as important and none rated as critical. This month’s update includes patches for: Azure Data Explorer Kestrel Web Server Microsoft Dynamics Microsoft Dynamics GP Microsoft Edge (Chromium-based) Microsoft Office Microsoft Office…

eKnow Your Customer Requirements Driving Change By John Callahan, CTO, VeridiumID KYC – Know Your Customer is a process used around the globe for many years to validate the identity of a customer. Many of you will have already experienced KYC, if you have ever opened a bank account, bought a property or even obtained a SIM card for your mobile phone. You will have been asked by the bank/solicitor/mobile operator for proof of identity….

Senior cybersecurity official Katie Arrington has resigned from her position at the Pentagon. Arrington has been on administrative leave from her role as the chief information security officer for acquisition and sustainment (A&S) at the Department of Defense (DoD) since May 2021. The CIO’s Gamma security clearance was suspended by the National Security Agency (NSA) after she was accused of improperly disclosing top-secret information to a DoD contractor.  Mark Zaid, Arrington’s attorney, said his client had resigned in protest of the…

Microsoft 365 users are being tricked into exposing their credentials by a vintage phishing technique involving mislabeled files.  According to cybersecurity researchers at Vade, malicious actors are dusting off Right-to-Left Override (RLO) attacks to trick victims into executing files with disguised extensions. When victims open the files, they are prompted to enter their Microsoft 365 login information. Vade’s threat analyst team has identified more than 200 RLO attacks on Microsoft 365 users in the last two…

The various threat intelligence stories in this iteration of the Anomali Cyber Watch discuss the following topics: APT, Cyberespionage, Data breach, RATs, SEO poisoning, and Spearphishing. The IOCs related to these stories are attached to Anomali Cyber Watch and can be used to check your logs for potential malicious activity. Figure 1 – IOC Summary Charts. These charts summarize the IOCs attached to this magazine and provide a glimpse of the threats discussed. Trending Cyber…