Cyber Risks · Unit 42 Palo Alto Networks

Network Attack Trends: Internet of Threats (November 2020-January 2021)

Summary: Unit 42 analyzed network traffic from November 2020 to January 2021 and found that 75% of observed attacks were classified as critical, up from 50.4% in the fall of 2020, with 3.47 million of 6.09 million traffic triggers counted as true attacks. Attackers exploited newly disclosed flaws including CVE-2020-28188, CVE-2020-17519 and CVE-2020-29227, and code execution accounted for 46.6% of attacks, with the largest share of attack origins traced to Russia, followed by the United States and China.
Key Takeaway: Three-quarters of the attacks Unit 42 captured were critical severity, and attackers were running exploits for vulnerabilities disclosed within the prior year alongside older ones from 2017-2020 - a patch cadence measured in months leaves that window open.

Read the original at Unit 42 Palo Alto Networks ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2013-1599 CVE-2013-7389 CVE-2013-7471 CVE-2014-2617 CVE-2014-3704 CVE-2015-1635 CVE-2015-7808 CVE-2015-8562 CVE-2016-8869 CVE-2017-0144 CVE-2017-0147 CVE-2017-12542 CVE-2017-5215 CVE-2017-9841 CVE-2018-14847 CVE-2018-20062 CVE-2018-6605 CVE-2018-7314 CVE-2018-7422 CVE-2018-7482 CVE-2018-7600 CVE-2018-7602 CVE-2018-9118 CVE-2018-9205 CVE-2019-0192 CVE-2019-0193 CVE-2019-0232 CVE-2019-0606 CVE-2019-0708 CVE-2019-14205 CVE-2019-16759 CVE-2019-17554 CVE-2019-6340 CVE-2019-8942 CVE-2019-9082 CVE-2019-9879 CVE-2019-9880 CVE-2019-9881 CVE-2020-0796 CVE-2020-11732 CVE-2020-11738 CVE-2020-11975 CVE-2020-12720 CVE-2020-12800 CVE-2020-1350 CVE-2020-13671 CVE-2020-13942 CVE-2020-1472 CVE-2020-17496 CVE-2020-17519 CVE-2020-17530 CVE-2020-1957 CVE-2020-23972 CVE-2020-25213 CVE-2020-27615 CVE-2020-28188 CVE-2020-29227 CVE-2020-5766
Related: Network Attack Trends: Internet of Threats (August-October 2020) Cyber Risks ·
Lucifer: New Cryptojacking and DDoS Hybrid Malware Exploiting High and Critical Vulnerabilities to Infect Windows Devices Cyber Risks ·
Exploits in the Wild for vBulletin Pre-Auth RCE Vulnerability CVE-2020-17496 Cyber Risks ·