ZeroFox Intelligence Daily Intelligence Brief - February 22, 2023

ZeroFox Daily Intelligence Brief - February 22, 2023

ZeroFox Intelligence collects, curates, and analyzes information derived from open and proprietary sources. Please find today’s daily roundup with recommendations that aim to give you and your clients an advantage over the adversary.

Key Findings

• Activision Confirms Data Breach Exposing Employee and Game Info
• Exploit Released for Critical Fortinet RCE Flaws, Patch Now
• U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

Activision Confirms Data Breach Exposing Employee and Game Info

Video game maker Activision suffered a data breach that reportedly led to the exfiltration of confidential data, including Activision’s content-release schedule up to November 17, 2023. The company stated that no player details or game source code was compromised in the attack. The data breach is believed to have occurred after an employee from the Activision Human Resources department fell victim to an SMS phishing text.

Recommendations:

• Never share your login credentials or any other confidential information in response to requests over a phone call or SMS, no matter how legitimate the request seems.
• Dark-web data scanning and collection services, including those offered by ZeroFox, can help monitor the stolen data being sold or shared in the deep and dark web.

Exploit Released for Critical Fortinet RCE Flaws, Patch Now

Proof-of-concept exploit code has been released for a now-patched critical vulnerability (CVE-2022-39952; CVSS score: 9.8) in cybersecurity company Fortinet’s FortiNAC network access control suite. Fortinet disclosed the bug on February 16, warning users that an unauthenticated attacker can exploit the bug to write arbitrary files on the system and achieve remote-code execution with the highest privileges.

Recommendations:

• FortiNAC administrators should immediately upgrade to a secure version of the product, specifically FortiNAC 9.4.1 or later, 9.2.6 or above, 9.1.8 or later, and 7.2.0 or later.
• Follow ZeroFox Intelligence for updates on currently exploited vulnerabilities and their indicators of compromise.

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three security bugs (CVE-2022-41223, CVE-2022-40765, and CVE-2022-47986) to its Known Exploited Vulnerabilities (KEV) catalog. Two of these bugs affect Mitel MiVoice Connect, while the third allows remote code execution on file-exchange application IBM Aspera Faspex. Federal Civilian Executive Branch agencies are mandated to apply the necessary updates by March 14, 2023.

Recommendations:

• Even though only U.S. federal agencies are mandated to apply the patches by the designated date, all organizations should deploy the available security updates to secure their systems.
• Utilize the ZeroFox platform’s Intelligence Search for updates on actively-exploited vulnerabilities.