Patch/Configuration Management

Several Russian companies have been subjected to intrusions exploiting the already-patched WinRAR vulnerability, tracked as CVE-2023-38831, by the PhantomCore cyberespionage operation, which has been linked to Ukraine, reports The Record, a news site by cybersecurity firm Recorded Future.

Potential cyberattacks facilitated by covertly installed browser extensions could have been deployed with the exploitation of an already addressed medium-severity privilege escalation vulnerability in Microsoft Edge, according to The Hacker News.

CISA encouraged security teams handling industrial control systems to review and mitigate the Rockwell Automation bugs.

A PoC exploit is available for the critical flaw, which was added to CISA’s KEV catalog Monday.

Microsoft says it will fix this month’s Patch Tuesday for Windows Server in the coming days.

Researchers say they reported their findings to Chattr.ai on Jan. 10, then followed up with a full scan of the internet.