Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Network Security Trends: May-July 2021

Summary: Unit 42 tracked 5,308 new CVEs published from May to July 2021, of which 4,120 were medium severity or above, and 71.8% of those were remote vulnerabilities exploitable over a network. From more than 10 million sessions observed on Palo Alto Networks firewalls, researchers filtered to 2.29 million valid malicious sessions and found critical, high and medium severity exploits occurring at similar ratios, with code execution ranking first among attack categories and the largest share of attacks originating from the United States, followed by China and Russia.

What you should know: Attackers were actively exploiting vulnerabilities disclosed only weeks or months earlier, including Apache Airflow's CVE-2020-13927 and a VMware vCenter Server RCE, which means a patch you have not yet applied is already in someone's exploit set. Critical vulnerabilities retained high public proof-of-concept availability even as PoC rates for high and medium severity fell to 4.1%, so the most damaging flaws remain the easiest to weaponize.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Endpoint & Network Security
Related