Threat Source newsletter (June 16, 2022) — Three top takeaways from Cisco Live

Summary: Cisco Talos's June 16, 2022 newsletter reports Microsoft's Patch Tuesday included 40 high-severity vulnerabilities and one critical issue, CVE-2022-30136, a remote code execution flaw in the Windows NFS service version NFSv4.1 with a severity score of 9.8 that an attacker can exploit over the network with an unauthenticated, specially crafted call. The same round of updates fixes the Follina vulnerability that attackers are actively exploiting in the wild, and marks the official end of Internet Explorer after more than 25 years as Microsoft stopped supporting most versions and disabled the IE desktop application.
Bottom line: CVE-2022-30136 carries a 9.8 severity score and can be triggered by an unauthenticated network call, while Follina is already being exploited in the wild to deliver malware - so the gap between patch release and patch application is the exposure window a security leader has to close.

Read the original at Cisco Talos ↗

Topics: Detection & Response
Mentions: CVE-2022-30136
Related: Microsoft Patch Tuesday for June 2022 — Snort rules and prominent vulnerabilities Cyber Risks ·
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026
Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026