Security researchers are currently seeing CVE-2022-22718 being exploited in the wild. This CVE was patched by Microsoft as apart of Patch Tuesday updates on February 8, 2022. However, some organizations delay patches or do not keep up with patch management. CISA is warning organizations that attackers are abusing this vulnerability.
Link: https://thehackernews.com/2022/04/hackers-exploiting-recently-reported.html
Passkey-Themed Phishing Attacks Lead to Microsoft 365 Data Theft Article Link: https://www.bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft/ What does this mean for me? Florida DMV Database Breached Through Stolen Police
Red Flags That Expose Fake North Korean IT Workers Article Link: https://www.darkreading.com/insider-threats/red-flags-expose-fake-north-korean-it-workers What does this mean for me? Fake Voicemail SVG Attachments Fuel Large-Scale Phishing
