shot-button
Ganesh Chaturthi Ganesh Chaturthi
Home > Technology News > Hackers exploiting new Microsoft Oracle Apple bugs US agency

Hackers exploiting new Microsoft, Oracle, Apple bugs: US agency

Updated on: 13 February,2022 05:18 PM IST  |  New Delhi
IANS |

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that threat actors are actively exploiting new vulnerabilities coming from top tech companies like Microsoft, Oracle, Apache and Apple, among others

Hackers exploiting new Microsoft, Oracle, Apple bugs: US agency

Representative Image. Pic/iStock

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that threat actors are actively exploiting new vulnerabilities coming from top tech companies like Microsoft, Oracle, Apache and Apple, among others.

The national cyber-security agency listed 15 vulnerabilities based on evidence that threat actors are actively exploiting them.

These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and pose significant risk to the federal enterprise.

One of the vulnerabilities, a Microsoft Windows SAM local privilege escalation vulnerability, has a remediation date of February 24.

"The catalog is a living list of known CVEs that carry significant risk to the federal enterprise. It requires FCEB agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats," said the CISA.

The CISA strongly urged all organisations to reduce their exposure to cyberattacks by prioritising timely remediation of vulnerabilities as part of their vulnerability management practice.

"CISA will continue to add vulnerabilities to the catalog that meet the meet the specified criteria," it added.

Meanwhile, the agency said that in 2021, cybersecurity authorities in the US, Australia and the UK observed an increase in sophisticated, high-impact ransomware incidents against critical infrastructure organisations.

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the National Security Agency (NSA) observed incidents involving ransomware against 14 of the 16 US critical infrastructure sectors.

"Ransomware tactics and techniques continued to evolve in 2021, which demonstrates ransomware threat actors' growing technological sophistication and an increased ransomware threat to organisations globally," it warned.

The market for ransomware became increasingly "professional" in 2021, and the criminal business model of ransomware is now well established.

In addition to their increased use of ransomware-as-a-service (RaaS), ransomware threat actors employed independent services to negotiate payments, assist victims with making payments, and arbitrate payment disputes between themselves and other cyber criminals.


Also Read: Microsoft takes control of websites used by China-backed hackers



"Exciting news! Mid-day is now on WhatsApp Channels Subscribe today by clicking the link and stay updated with the latest news!" Click here!

Register for FREE
to continue reading !

This is not a paywall.
However, your registration helps us understand your preferences better and enables us to provide insightful and credible journalism for all our readers.

Mid-Day Web Stories

Mid-Day Web Stories

This website uses cookie or similar technologies, to enhance your browsing experience and provide personalised recommendations. By continuing to use our website, you agree to our Privacy Policy and Cookie Policy. OK