CISA: Immediate patching for Lorenz ransomware-exploited Exchange flaw needed

The Cybersecurity and Infrastrastructure Security Agency has updated its Known Exploited Vulnerabilities Catalog with two more security flaws, including a Microsoft Exchange privilege escalation bug, tracked as CVE-2022-41080, according to BleepingComputer.

agency bleepingcomputer bug catalog cisa critical infrastructure cve cve-2022-41080 cybersecurity email security escalation exchange exploited flaw flaws known exploited vulnerabilities known exploited vulnerabilities catalog lorenz lorenz ransomware microsoft microsoft exchange network security patching privilege privilege escalation ransomware security security flaws vulnerabilities