March 12, 2022 Cybersecurity Briefing: Ransomware Threats and Vulnerabilities

# Lead Story: Ongoing Ransomware Threats Amid Vulnerability Surge

As cyber threats escalate, ransomware remains a top concern for organizations globally. A recent survey reveals that 39% of UK businesses faced cyberattacks in the past year, with 31% experiencing attacks weekly. Phishing, malware, and denial-of-service are among the most common threats encountered. This alarming trend underscores the need for robust cybersecurity measures to combat the growing sophistication of attacks. The high volume of incidents calls for immediate action from organizations to enhance their defenses and protect critical data.

# Secondary Items:

CISA Adds 22 Critical Vulnerabilities to Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added 22 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Among these, critical issues from vendors like Microsoft were highlighted, emphasizing the urgency for U.S. federal agencies to prioritize patching. Organizations must act swiftly to mitigate risks associated with these vulnerabilities to safeguard their systems. source

Microsoft Discloses Zero-Day Vulnerabilities

Microsoft has released updates addressing three significant zero-day vulnerabilities, including a remote code execution flaw in the Remote Desktop Client. This development raises concerns about the ongoing risk posed by known vulnerabilities, necessitating immediate updates from affected organizations to secure their environments. source

NCSC Warns of Russian Software Risks

In light of the Russian invasion of Ukraine, the UK's National Cyber Security Centre (NCSC) has issued warnings regarding the use of Russian software, specifically Kaspersky antivirus. The concern stems from potential risks associated with limited updates amid ongoing sanctions, urging organizations to reconsider their reliance on such software. source

# Analyst Perspective The cybersecurity landscape continues to evolve rapidly, with ransomware threats and critical vulnerabilities dominating discussions. The intersection of geopolitical tensions and cybersecurity risks emphasizes the need for organizations to adopt proactive measures. As cybercriminals increase their sophistication, it's essential for businesses to stay informed and enhance their security protocols. Cyber hygiene, including timely patching and threat awareness, remains crucial in mitigating the impact of these ongoing threats.