Network Security Trends: August-October 2022
Summary: Unit 42 observed attacks in August-October 2022 heavily targeting the Realtek Jungle SDK remote code execution vulnerability (CVE-2021-35394), which accounted for 71.4% of all critical attacks and 41.8% of the total attack volume across 232 million valid malicious sessions. Of the 5,190 new CVEs registered in the period, 73.4% were remote vulnerabilities and 26.6% were local, with cross-site scripting the most reported type and buffer overflow prevalence rising.
What's compelling: A single 2021 vulnerability in the Realtek Jungle SDK drove nearly three-quarters of critical attacks this quarter, and most new CVEs can be exploited over the network from anywhere - so an unpatched device on your perimeter is the exposure that matters most.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2021-35394
- Related
- CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021