Attacks by Russian threat operation APT28, also known as Fancy Bear, Strontium, and Forest Blizzard, using the GooseEgg malware to exploit the Windows print spooler flaw, tracked as CVE-2022-38028, have prompted the security issue’s inclusion to the Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalog, Security Affairs reports. Patches for the flaw, which Microsoft issued in October 2022, should be implemented by federal agencies by May 14, according to CISA.

Source: SC Magazine