Web-based Threats-2018 Q2: U.S. Remains #1 in Malicious Web Addresses, China Falls from #2 to #7
Summary: Unit 42's Q2 2018 analysis found the United States ranked first for hosting malicious domains and exploit kits, accounting for more exploit kits than all other countries combined and holding more than a two-to-one lead over second-place Russia. The quarter saw six CVEs exploited, including the newly patched CVE-2018-8174, which reached second place with 291 malicious URLs after a zero-day exploit appeared four days after Microsoft's May 8 patch, while two roughly nine-and-a-half-year-old Internet Explorer vulnerabilities remained in the top five.
Key Takeaway: Attackers weaponized CVE-2018-8174 within four days of its patch, and two nine-and-a-half-year-old Internet Explorer flaws were still being exploited in the top five - meaning unpatched legacy browsers and slow patch cycles remain live exposure, not historical trivia.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2009-0075CVE-2014-6332CVE-2015-5122CVE-2016-0189CVE-2018-8174
- Related
- The Old and New: Current Trends in Web-based Threats Cyber Risks ·Web-Based Threats: First Half 2019 Cyber Risks ·CVE-2015-5122: Adobe Flash Player Use-After-Free Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022