Threat Source newsletter (Jan. 16, 2019)
Summary: Cisco Talos reported that Microsoft's January 2019 Patch Tuesday was the last free update for Windows 7 and included a cryptographic spoofing vulnerability that could let an attacker sign a malicious file as if it came from a trusted source, severe enough that Microsoft gave the U.S. military an early patch. Talos also released Snort rules for Citrix bugs exploited in the wild and noted ZeroCleare wiper malware, tied to an Iranian hacker group, was deployed against a national oil refinery in Bahrain.
What you should know: A spoofing bug that lets an attacker sign malware as a trusted publisher undermines the signature checks many organizations rely on, and Microsoft's decision to patch the U.S. military ahead of general release shows how narrow the window was.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026