CERT-In, pose significant risks, including unauthorized access to sensitive data, remote code execution, bypassing security controls, spoofing, tampering attacks, and triggering denial-of-service conditions. A statement on CERT-In's website warns, "Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to gain elevated privileges, obtain sensitive information, conduct remote code execution attacks, bypass security restrictions, conduct spoofing attacks, conduct tampering attacks, or cause denial of service conditions." Exploitation of these vulnerabilities, as cautioned by CERT-In, can result in security breaches leading to financial losses, data theft, and unauthorized access to sensitive information.
To mitigate the risks associated with these vulnerabilities, CERT-In advises users to ensure regular software updates, encompassing systems, applications, and security software. Security updates typically contain patches addressing such vulnerabilities.
Furthermore, users are encouraged to maintain robust passwords for accounts containing sensitive information and to install antivirus software to mitigate the risk of malicious viruses. Additionally, exercising caution when interacting with links and phishing emails is emphasized to prevent unauthorized access by malicious actors.
In separate developments, a newly discovered zero-day vulnerability in Google Chrome has sparked worry among both regular users and cybersecurity specialists. CERT-In has issued a high-severity warning, emphasizing the seriousness of these fresh security vulnerabilities.
Read more on livemint.com