U.S Cybersecurity Agency Lists 2021’s Top 15 Most Exploited Software Vulnerabilities

According to the “Top Routinely Exploited Vulnerabilities” report released by cybersecurity authorities from the Five Eyes nations –  Log4Shell, ProxyShell, ProxyLogon, ZeroLogon, and flaws in Zoho ManageEngine AD SelfService Plus, Atlassian Confluence, and VMware vSphere Client emerged as some of the top exploited security vulnerabilities in 2021.

“Globally, in 2021, malicious cyber actors targeted internet-facing systems, such as email servers and virtual private network (VPN) servers, with exploits of newly disclosed vulnerabilities,” the agencies said in a joint advisory.

To mitigate the risk of exploitation of publicly known software vulnerabilities, the agencies are recommending organizations to apply patches in a timely fashion and implement a centralized patch management system.

Read the full article here – https://thehackernews.com/2022/04/us-cybersecurity-agency-lists-2021s-top.html

Read the full list here – https://www.cisa.gov/uscert/ncas/alerts/aa22-117a