Network Security Trends: November 2021 to January 2022
Summary: Unit 42 analyzed more than 200 million sessions from November 2021 to January 2022, filtering to 167.34 million valid malicious sessions, and found that high severity attacks made up more than half of observed attacks for the first time. Of 6,443 newly registered CVEs, 68.7% were remote vulnerabilities and cross-site scripting remained the most common type at almost 10.6%, while remote code execution ranked first among attacks observed in the wild, followed by information disclosure.
Why it matters: The Apache Log4j remote code execution vulnerabilities (CVE-2021-44228, CVE-2021-45046) drove an unprecedented volume of attacks starting the week of December 6, 2021, with most attacks beginning right after exploitation details were disclosed - and the largest share of attack traffic appeared to originate from the United States, followed by Germany and Russia.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026