Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Summary: Microsoft released updates for 100 security holes in Windows and other software, including CVE-2023-28252, a zero-day in the Windows Common Log System File System (CLFS) driver that is under active attack. Apple separately issued emergency updates on April 7 for two actively exploited zero-days, CVE-2023-28206 and CVE-2023-28205, addressed in iOS/iPadOS 16.4.1, iOS 15.7.5, and macOS 12.6.5 and 11.7.6.
What you should know: Qualys says CVE-2023-28252 has been used by cyber criminals to deploy Nokoyawa ransomware, a strain possibly related to Hive, which was linked to breaches of over 300 organizations in a few months, with targets observed in the Americas, Asia and the Middle East.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-37969 CVE-2023-28205 CVE-2023-28206 CVE-2023-28219 CVE-2023-28220 CVE-2023-28231 CVE-2023-28252
Related: Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities Cyber Risks ·
Threat Source newsletter (April 13, 2023) — Dark web forum whac-a-mole Cyber Risks ·
CVE-2023-28252: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Apr 11, 2023