Joint Cybersecurity Agencies Issue Advisory on Nation-State Exploitation of Critical Vulnerabilities

CISA, FBI, and CNMF have released a joint cybersecurity advisory warning about multiple nation-state threat actors exploiting vulnerabilities CVE-2022-47966 and CVE-2022-42475. The advisory highlights an incident in the Aeronautical Sector where advanced persistent threat actors gained unauthorized access to a public-facing application and established persistence in the network. Organizations are urged to review the advisory and implement recommended mitigations to secure their infrastructure. Suspicious activity should be reported to the FBI and CISA.