Threat Source newsletter (Dec. 15, 2022): Talos Year in Review is here
Summary: Cisco Talos published its inaugural 2022 Year in Review, a data-driven report covering major security events, threat landscape trends, and top threats, with livestreams scheduled on APTs (Jan. 10), the threat landscape (Jan. 24), and ransomware and commodity loaders (Feb. 7). The same newsletter notes the U.S. DOJ's takedown of leading DDoS-for-hire sites under "Operation PowerOFF" with the U.K.'s National Crime Agency, Dutch police, and Europol, and CISA's addition of Veeam, Fortinet, Microsoft, and Citrix flaws to its Known Exploited Vulnerabilities Catalog, including critical Veeam Backup & Replication flaws CVE-2022-26500 and CVE-2022-26501.
Key Takeaway: Veeam's Backup & Replication is used by 70% of Fortune 2000 companies, and the two critical flaws now in CISA's exploited-vulnerabilities catalog make that backup layer a standing target for malicious actors.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2022-26500CVE-2022-26501
- Related
- CVE-2022-26501: Veeam Backup & Replication Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 13, 2022CVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 13, 2022ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026