Time to secure hybrid work for 2022, not 2002
Summary: Cisco Talos reports that 2021 saw more than 50 instances of in-the-wild zero-day exploitation, more than in all of 2020 and 2019 combined, and that the Tianfu Cup contest in China demonstrated at least 30 successful exploits against targets including the latest Windows and iOS. Talos attributes the rise in supply chain attacks to both state-sponsored actors and criminal groups, citing the REvil-attributed Kaseya compromise and the Sea Turtle DNS service attack, and recommends MFA, zero-trust frameworks, SASE architecture, and SBOMs from vendors.
Key Takeaway: Talos notes that vendors often ask for their software to be placed in XDR exclusion groups, which creates a blind spot that proved devastating in SolarWinds - so the tool you excluded to avoid false positives may be the one an attacker walks through.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026