Staying ahead of threat actors in the age of AI
microsoft.com · 14 Feb 2024 · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMicrosoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer4 reports99.2%Top 0.07%87.4priority
Where it names them
CVE-2022-30190 Original (opens in a new tab) ↗
LLM-assisted vulnerability research: Interacting with LLMs to better understand publicly reported vulnerabilities, such as the CVE-2022-30190 Microsoft Support Diagnostic Tool (MSDT) vulnerability (known as “Follina”).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.