Cyber Defense eMagazine January Edition for 2022

awakening if an attacker is able to get to it before they do. In fact, a very similar high-severity RCE
security flaw, tracked as CVE-2021-40444, made headlines earlier this month when it was actively
exploited in targeted attacks against Microsoft Office and Office 365 on Windows 10 computers.
Office-based threats continue to be popular when it comes to malware, which is why we’re still
spotting these tried-and-true attacks in the wild. Fortunately, they’re still being detected by tried-andtrue
IPS defenses.
9. Phishing domains masquerade as legitimate, widely recognized domains – WatchGuard has
observed an increase in the use of malware recently targeting Microsoft Exchange servers and
generic email users to download remote access trojans (RATs) in highly sensitive locations. This is
most likely due to Q2 being the second consecutive quarter that remote workers and learners returned
to either hybrid offices and academic environments or previously normal behaviors of on-site activity.
In any event – or location – strong security awareness and monitoring of outgoing communications
on devices that aren’t necessarily connected directly to the connected devices is advised.
With most of the world still working from home or in a hybrid model, the traditional network perimeter is
in flux, but still more important than ever. Strong perimeter security starts with robust network security,
endpoint protection, multi-factor authentication, and secure Wi-Fi. These are all critical elements in a
layered security approach. When done properly, organizations can significantly mitigate outsider threats.
About the Author
Corey Nachreiner is the CSO of WatchGuard Technologies. A
front-line cybersecurity expert for nearly two decades, Corey
regularly contributes to security publications and speaks
internationally at leading industry trade shows like RSA. He has
written thousands of security alerts and educational articles and
is the primary contributor to the Secplicity Community, which
provides daily videos and content on the latest security threats,
news and best practices. A Certified Information Systems
Security Professional (CISSP), Corey enjoys "modding" any
technical gizmo he can get his hands on and considers himself a hacker in the old sense of the word.
Corey can be reached at @SecAdept on Twitter or via https://www.watchguard.com.
Cyber Defense eMagazine – January 2022 Edition 128
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.