APT37 Exploits Microsoft Internet Explorer Zero Day Vulnerability
The APT37 threat group was discovered exploiting a remote code execution vulnerability in Windows Scripting Languages (CVE-2022-41128).
The initial infection vector consisted of malicious Microsoft Office documents along with a rich text file (RTF) remote template.
Successful exploitation requires the victim to disable protected view before the remote RTF template is downloaded.
Featured Resources
blog
How Do You Know? Answers to help the board understand the value of your security program
This is Part 5 of our five-part series on Continuous Threat Exposure Management (CTEM). Boards and business leaders need more
CUSTOMERS
Insurance Leader Strengthens Security to Drive Innovation with Cymulate
This Indian insurance leader relies on Cymulate for automated exposure validation that optimizes security controls, tests the latest threats and
blog
Using Continuous Threat Exposure Management to Enable Business Partnership
This is Part 4 of our five-part series on Continuous Threat Exposure Management (CTEM). Effective cybersecurity is not just about
Subscribe to Our Blog
Subscribe now to get the latest insights, expert tips and updates on threat exposure validation.
Subscribe