Top CVEs to Patch: Insights from the 2022 Unit 42 Network Threat Trends Research Report
Summary: Unit 42's 2022 Network Threat Trends Research Report analyzed 262 million attack traffic sessions from 2021, collected via Palo Alto Networks telemetry across the United States, Singapore, Japan, Australia, Canada and Europe, to identify the vulnerabilities attackers exploited most. The Apache Log4j vulnerabilities were the most exploited CVEs of 2021, with over 11 million attack sessions observed in less than one month, accounting for 4.2% of total attack sessions, while some other top vulnerabilities were disclosed as far back as 2017.
What's compelling: Log4j drew more than 11 million attack sessions in under a month, yet vulnerabilities from 2017 still ranked among the most exploited - a reminder that unpatched older software remains an active target, not a historical one.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2020-5902CVE-2021-35464
- Related
- Attackers target Ukraine using GoMet backdoor Cyber Risks ·CVE-2021-35464: Forge Rock Access Management (AM) Core Server Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021