{"id":19916,"date":"2022-08-22T16:10:39","date_gmt":"2022-08-23T00:10:39","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2022\/08\/22\/news-13649\/"},"modified":"2022-08-22T16:10:39","modified_gmt":"2022-08-23T00:10:39","slug":"news-13649","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/08\/22\/news-13649\/","title":{"rendered":"CISA wants you to patch these actively exploited vulnerabilities before September 8"},"content":{"rendered":"

On Thursday, CISA (the US Cybersecurity and Infrastructure Security Agency) updated its catalog of actively exploited vulnerabilities<\/a> by adding seven new entries. These flaws were found in Apple, Google, Microsoft, Palo Alto Networks, and SAP products. CISA set the due date for everyone to patch the weaknesses by September 8, 2022.<\/p>\n

CVE-2022-22536, an SAP flaw with the highest risk score of 10, is one of the seven. We wrote about it in February, and thankfully, SAP addressed the issue fairly quickly, too, by issuing a patch. CISA even mentioned that if customers fail to patch CVE-2022-22536, they could be exposed to ransomware attacks, data theft, financial fraud, and other business disruptions that’d cost them millions.<\/p>\n

CVE-2022-32893<\/strong><\/a> and CVE-2022-32894<\/strong><\/a>, the two zero-day, out-of-bounds write vulnerabilities affecting iOS, iPadOS, and macOS, continue to headline<\/a> as of this writing. These are serious flaws that, if left unpatched, could allow anyone to take control of vulnerable Apple systems. Apple already released fixes for these from the following support pages:<\/p>\n