Attackers are exploiting a new Windows zero-day security vulnerability, Microsoft says: Here's the fix.
Although exploiting CVE-2022-37969 requires access to the target system, and the ability to run code upon it, lowers the risk, it doesn't mitigate it to anything approaching zero. A threat actor will likely use malware that exploits a different vulnerability or a simple 'malicious link click' phishing attack to achieve this access.
Mike Walters, a cybersecurity executive at Action1, says that"since the vulnerability has low complexity and requires no user interaction, an exploit will likely soon be in the arsenal of both white hats and black hats.” It is therefore highly recommended that you patch this sooner rather than later.
We have summarized this news so that you can read it quickly. If you are interested in the news, you can read the full text here. Read more: