Network Security Trends: November 2022-January 2023
Summary: Unit 42's November 2022-January 2023 review counted 6,169 newly registered CVEs, of which 77.4% are remote vulnerabilities exploitable over a network and 22.6% are local. Researchers analyzed 276 million valid malicious sessions from Palo Alto Networks firewall sensors and found remote code execution the most prevalent attack category, with cross-site scripting the most reported vulnerability type and attacks from Luxembourg rising from about 2.2 million to 5.8 million between December 2022 and January 2023.
Key Takeaway: Attacks from Luxembourg reached 7.77 million against CVE-2021-35394 alone, 96% of that country's total, showing how quickly a single unpatched vulnerability can dominate a threat actor's volume. With most new CVEs remotely exploitable and attackers favoring 2021-2022 disclosures, patch latency is the exposure that matters.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026