The October 2022 Fidelis Threat Intelligence Summary reviews key APT and cybercrime reporting, emphasizing that attackers continue to rely on phishing, social engineering, and exploitation of unpatched systems. It highlights government advisories on China state-sponsored exploitation of widely used CVEs, Iranian “Emennet Pasargad” hack-and-leak operations, and Impacket-based lateral movement against a defense industrial base partner. The report tracks nearly 6,000 emerging vulnerabilities, led by Fortinet authentication bypass CVE-2022-40684 and Apache Commons Text CVE-2022-42889, plus Exchange, Zimbra, SQLite, Windows TCP/IP, Apple iOS, Cobalt Strike, and Trend Micro flaws. October telemetry cites 84K high-severity malware threats and 262 critical exploitation attempts, with njRAT, Fareit

Join for free to read