• Drenched in patches

    PATCH WATCH

    Susan Bradley

    By Susan Bradley

    As is typical for this time of year, Microsoft is releasing a deluge of security patches for our Windows machines.

    One threat has already been used in the wild. CVE-2022-24521 is a vulnerability in the Windows Common Log File System Driver and can lead to elevation of privileges on a system. Troubling to me is CVE-2022-26809, which is a potentially wormable remote code vulnerability that could be especially damaging if the attacker gets inside your firewall or network.

    Read the full story in our Plus Newsletter (19.16.0, 2022-04-18).