{"id":7738,"date":"2022-05-16T18:20:29","date_gmt":"2022-05-17T01:20:29","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=7738"},"modified":"2022-05-16T18:20:29","modified_gmt":"2022-05-17T01:20:29","slug":"2021-most-exploited-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/security\/2021-most-exploited-vulnerabilities\/","title":{"rendered":"2021 Most Exploited Vulnerabilities"},"content":{"rendered":"

Cybersecurity authorities just issued alert AA22-117A, which provides information on the top 15 Common Vulnerabilities and Exposures (CVEs) most frequently used and exploited by malicious cyber actors in 2021. This important alert was co-authored by the cybersecurity authorities from the United States, Australia, New Zealand, Canada, and the United Kingdom. In the United States, key participants included the Cybersecurity and Infrastructure Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA). Please note that there are approximately 611 more dangerous CVEs in the <\/span>CISA Known Exploited Vulnerabilities Catalog.<\/span><\/a><\/p>\n

The 1,000-Foot View<\/b><\/h3>\n

Throughout 2021, dangerous threat actors targeted newly disclosed critical software vulnerabilities against targeted entities to include both public and private sector organizations worldwide. Malicious cyber actors targeted internet-facing systems, such as email servers and virtual private network (VPN) servers, with exploits of newly disclosed vulnerabilities. For most of the top exploited vulnerabilities, researchers or other actors released proof of concept (POC) code within two weeks of the vulnerability\u2019s disclosure, likely facilitating exploitation by a broader range of malicious actors.<\/span><\/p>\n

Threat actors continued to exploit publicly known, older software vulnerabilities across a broad spectrum of targets. The exploitation of older vulnerabilities illustrates the continued risk to organizations that fail to patch software in a timely manner or are using software that is no longer supported by a vendor.<\/span><\/p>\n

Highlighting Some Top Exploited 2021 Vulnerabilities<\/b><\/h3>\n