Threat Source Newsletter (Jan. 13, 2022)
Summary: Microsoft's January 2022 monthly security update disclosed 102 vulnerabilities, the largest monthly total in eight months, including nine critical issues, none of which Microsoft says were exploited in the wild. Cisco Talos also reported multiple vulnerabilities in the Garrett iC module that connects Garrett PD 6500i and MZ 6100 walk-through metal detectors to a network, allowing attackers to bypass authentication, alter sensitivity settings, and execute arbitrary code.
Key Takeaway: The metal detector flaws sit in equipment used at security checkpoints, where an attacker changing sensitivity levels or reading alarm and visitor statistics undermines the screening itself. Separately, four Office remote code execution flaws in this update can be triggered by a target opening a crafted document, an attacker favorite.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21837CVE-2022-21840CVE-2022-21841CVE-2022-21842
- Related
- ‘Wormable’ Flaw Leads January 2022 Patch Tuesday Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026