Threat Intel Updates - Sep 2023

Threat Intel Updates - 27th Sep

Release Date:  27th Sep 2023

To ensure your SAFE platform is assessing risks based on our most recent threat intelligence, SAFE has made the following updates:

• Technique mapping added/updated for 1058 CVEs -Refer to List 1
• Updated CISA KEV CVEs - as of 6th Sept 2023 -Refer to List 2
• CVE registered on NVDas of 6th Sept 2023.
  • List 3 below indicates CVEs in NVD that have been assessed but may be subject to future review.

Your SAFE score could be affected by these updates if your assets are discovered to be impacted by recently identified CVEs or TTP mappings or if you have existing Controls, CVEs, or TTP mappings that have been modified.

List 1: CVE Added/Updated - 27th Sep

  

List 2 - KEV CVEs added/updated - 27th Sep

• CVE-2023-35674
• CVE-2023-20269
• CVE-2023-4863
• CVE-2023-26369
• CVE-2022-22265
• CVE-2014-8361
• CVE-2017-6884
• CVE-2021-3129
• CVE-2022-31459
• CVE-2022-31461
• CVE-2022-31462
• CVE-2022-31463

List 3: CVEs that may be subject to future TTP mapping updates - 27th Sep

• CVE-2023-4333

Threat Intel Updates - 14th Sep

Release Date:  14th Sep 2023

To ensure your SAFE platform is assessing risks based on our most recent threat intelligence, SAFE has made the following updates:

• Technique mapping added/updated for 1106 CVEs -Refer to List 1
• Updated CISA KEV CVEs - as of 23rd August 2023 -Refer to List 2
• CVE registered on NVDas of 23rd August 2023.
  • List 3 below indicates CVEs in NVD that have been assessed but may be subject to future review.
• Bug fixes
  • Resolved the issue where some Windows asset types were not shown if you moved them from the "Others" vertical to the "Server" or "Endpoint" vertical.

Your SAFE score could be affected by these updates if your assets are discovered to be impacted by recently identified CVEs or TTP mappings or if you have existing Controls, CVEs, or TTP mappings that have been modified.

List 1: CVE Added/Updated - 14th Sep

  

List 2 - KEV CVEs added/updated - 14th Sep

• CVE-2023-38035
• CVE-2023-27532
• CVE-2023-38831
• CVE-2023-32315

List 3: CVEs that may be subject to future TTP mapping updates - 14th Sep

None

Threat Intel Updates - 06 Sep

Release Date:  06th Sep 2023

To ensure your SAFE platform is assessing risks based on our most recent threat intelligence, SAFE has made the following updates:

• Technique mapping added/updated for 1110 CVEs -Refer to List 1
• Updated CISA KEV CVEs - as of 9th August 2023 -Refer to List 2
• CVE registered on NVDas of 9th August 2023.
  • List 3 below indicates CVEs in NVD that have been assessed but may be subject to future review.

Your SAFE score could be affected by these updates if your assets are discovered to be impacted by recently identified CVEs or TTP mappings or if you have existing Controls, CVEs, or TTP mappings that have been modified.

List 1: CVE Added/Updated

  

List 2 - KEV CVEs added/updated

• CVE-2023-29689
• CVE-2023-37580
• CVE-2023-35081
• CVE-2023-38180
• CVE-2023-24489
• CVE-2023-26359

List 3: CVEs that may be subject to future TTP mapping updates

None.