Weekly briefing

Week 13 · 27 Mar – 2 Apr 2023 UTC · assess the changes, then plan the next dates.

All dated changes in this period

5 source records · 4 groups

Apr 2023

Updates and guidanceDefender2 source records

Product news · 2 entries

Training only campaigns available with an expanded library: You can now directly assign training content to your organization without needing to tie training to a phishi…
Product news · Microsoft Defender for Office 365 what's new
Using machine learning to drive more effective simulations in Attack Simulation and Training: Make use of intelligent predicted compromise rate (PCR) and Microsoft Defen…
Product news · Microsoft Defender for Office 365 what's new

30 Mar 2023

SecurityGoogle Chrome

Google Chromium Network Service Use-After-Free Vulnerability

Google · exploited, added to CISA KEV

CVE-2022-3038

Assessment context

CISA lists it as exploited

30 Mar 2023

SecurityiOS and iPadOS / macOS

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple · exploited, added to CISA KEV

CVE-2021-30900

Assessment context

CISA lists it as exploited

30 Mar 2023

SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer Memory Corruption Vulnerability

Added to CISA KEV

CVE-2013-3163

Assessment context

CISA lists it as exploited

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.