Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks “New Strategies for Improving Digital Security” “Strategies for Enhancing Digital Protection”
Kaspersky reported that Microsoft’s April 2023 Patch Tuesday updates successfully addressed a Windows zero-day vulnerability that was previously being exploited by cybercriminals in ransomware attacks. The vulnerability, identified as CVE-2023-28252, is a privilege escalation flaw affecting the Windows Common Log File System (CLFS) driver. Microsoft warned that the flaw has been exploited in the wild,…