CISA Adds One Known Exploited Vulnerability to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability, CVE-2022-48618, to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. This vulnerability, an improper authentication flaw in Apple's multiple products, is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. While the Known Exploited Vulnerabilities Catalog was initially intended for Federal Civilian Executive Branch (FCEB) agencies, CISA strongly recommends that all organizations prioritize the timely remediation of catalog vulnerabilities to reduce their exposure to cyberattacks.