Network Security News Summary for Tuesday May 10th, 2022
Channel: Internet Storm Center Stormcast
Date: 2022-05-10

Octopus Backdoor is Back; CVE-2022-1388 (BIG-IP) Exploits; Trend Micro Fix; Azure RCE Vuln;

Octopus Backdoor is Back with a New Embedded Obfuscated Bat File
 https://isc.sans.edu/forums/diary/Octopus+Backdoor+is+Back+with+a+New+Embedded+Obfuscated+Bat+File/28628/#comments

CVE-2022-1388 (BIG-IP) Exploits
 https://twitter.com/sans_isc/status/1523741896707043328
 https://github.com/horizon3ai/CVE-2022-1388

Trend Micro False Positive Aftermath
 https://success.trendmicro.com/dcx/s/solution/000290966?language=en_US

Microsoft Azure
 https://orca.security/resources/blog/azure-synapse-analytics-security-advisory/
 https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mitigated-in-the-third-party-data-connector-used-in-azure-synapse-pipelines-and-azure-data-factory-cve-2022-29972/

keywords: orca; msrc; microsoft; azure; synapse; trend micro; big-ip; bigip; f5; octopus; backdoor