Exploited Vulnerabilities

Latest

Exploited Vulnerabilities

Skull on screen showing vulnerability exploitation and stolen credentials in DBIR

Verizon 2026 DBIR: Vulnerability Exploitation Leaps Ahead of Stolen Credentials as #1 Initial Breach Cause

May 22, 2026

For the first time in its publication history of nearly 20 years, Verizon's annual Data Breach Investigations Report (DBIR) is tracking vulnerability exploitation as the leading initial access method for attackers. Stolen credentials had been the #1 method for the entirety of the report's history up to this year.

Virtual shields showing exploited vulnerabilities on Palo Alto firewalls

Cyber Security News

Over 2,000 Palo Alto Firewalls Compromised via Exploited Vulnerabilities

December 3, 2024

Unit 42 threat intel division has detected ongoing exploitation of Palo Alto firewalls via patched PAN-OS web interface zero-day vulnerabilities CVE-2024-0012 and CVE-2024-9474.

Hacker working showing top exploited vulnerabilities and zero-day

Cyber Security News

CISA Annual Top Exploited Vulnerabilities List Finds Zero-Days On the Rise, Log4Shell Still A Problem

November 15, 2024

CISA and the "Five Eyes" national intelligence agencies have issued their annual advisory on the top exploited vulnerabilities for the prior year, and its findings bolster some other recent reports that a successful attack is becoming increasingly likely to be the result of a zero-day.

Spider on keyboard showing zero-days and exploited vulnerabilities

Cyber Security News

Mandiant: 70% of Exploited Vulnerabilities in 2023 Were Zero-Days

October 23, 2024

A new report from Mandiant indicates that 70% of 2023's total of 138 exploited vulnerabilities were zero-days when first used, with the average time-to-exploit (TTE) dropping drastically from 32 days to just five.

Alert on software code showing XSS vulnerabilities

Cyber Security News

New CISA Alert Provides a Basic Game Plan for Eliminating XSS Vulnerabilities

September 25, 2024

A new joint alert from CISA and the FBI seeks to assist private sector software developers in removing XSS vulnerabilities from their products, with a basic overview of best practices aimed primarily at executives and business leaders.

Hacker in hoodie showing exploited vulnerabilities

Cyber Security News

The FBI, CISA, NSA and the Five Eyes Published the Top Most Exploited Vulnerabilities of 2022

August 11, 2023

Cybersecurity agencies from the Five Eyes Alliance published the list of the 12 most exploited vulnerabilities of 2022, revealing that hackers prefer older unpatched software bugs, with one dating back to 2018.

The word vulnerability against backdrop of bytes showing exploited vulnerabilities

Cyber Security News

CISA’s Compulsory Order Directs Federal Agencies To Patch 300 Actively Exploited Vulnerabilities Within Two Weeks

November 10, 2021

CISA directs federal agencies to adhere to the vulnerability management catalog and patch 300 exploited vulnerabilities assigned CVE IDs in 2021 within 2 weeks and 6 months for previous ones.

Hacker working at night showing cybersecurity advisory on exploited vulnerabilities

Cyber Security News

US, UK, and Australia Issue Joint Cybersecurity Advisory on the Top 30 Most Exploited Vulnerabilities in 2020 and 2021

August 5, 2021

Joint cybersecurity advisory warned that state and independent hackers continue to leverage commonly exploited vulnerabilities to compromise governments and private organizations.

Hacker working on a laptop in the late night showing warning on most exploited vulnerabilities

Cyber Security News

US Government Agencies Sound Warning on Top 10 Most Exploited Vulnerabilities

May 27, 2020

DHS and FBI published the top 10 most exploited vulnerabilities over the last four years. providing insight into how cybercriminals are taking advantage of well-known software vulnerabilities.

Exploited Vulnerabilities

Verizon 2026 DBIR: Vulnerability Exploitation Leaps Ahead of Stolen Credentials as #1 Initial Breach Cause

Over 2,000 Palo Alto Firewalls Compromised via Exploited Vulnerabilities

CISA Annual Top Exploited Vulnerabilities List Finds Zero-Days On the Rise, Log4Shell Still A Problem

Mandiant: 70% of Exploited Vulnerabilities in 2023 Were Zero-Days

New CISA Alert Provides a Basic Game Plan for Eliminating XSS Vulnerabilities

The FBI, CISA, NSA and the Five Eyes Published the Top Most Exploited Vulnerabilities of 2022

CISA’s Compulsory Order Directs Federal Agencies To Patch 300 Actively Exploited Vulnerabilities Within Two Weeks

US, UK, and Australia Issue Joint Cybersecurity Advisory on the Top 30 Most Exploited Vulnerabilities in 2020 and 2021

US Government Agencies Sound Warning on Top 10 Most Exploited Vulnerabilities

Russian Phishing Campaign Targets Messaging App Users to Steal Recovery Keys and Take Over Accounts

“Cyber Shield,” Britain’s Agentic AI Cyber Defense Project, Prepares for the World of Machine-Speed Attacks

Data Breach Hits AssuranceAmerica Exposing Personal Information of Nearly 7 Million People

Data Breach at Aflac Japan Impacts 4.38 Million Customers and Sales Agents