Do you have one of Vulnerable to the Top 8 Most Exploited Vulnerabilities?

By -
The Most Exploited Vulnerabilities in 2016-2019 as Reported by the FBI.
It probably won't surprise you that 7 of the 8 most exploited software vulnerabilities are to be found in Microsoft products.
Their widespread use across organizations and institutions makes them an ideal candidate for cybercriminals. According to U.S. Government technical analysis, malicious cyber actors most often exploit vulnerabilities in Microsoft's Object Linking and Embedding (OLE) technology. OLE allows documents to contain embedded content from other applications such as spreadsheets. But also Adobe Flash Player makes it to the list.

Older Unpatched Systems are Vulnerable for Cybersecurity Attacks 
A recent report on the most exploited vulnerabilities by the Cybersecurity & Infrastructure Security Agency (CISA) and the FBI listed the most routinely exploited vulnerabilities in the wild. The interesting thing is that most of these vulnerabilities are pretty old, yet cyber criminals have no problem to continue exploiting these publicly known software vulnerabilities to gain access to your network. The cited reason for this is that the exploitation of these known vulnerabilities often requires fewer resources as compared with new zero-day exploits.

The silver lining in this is that all of them have patches available and could be easily fixed by identifying which machines on your network are still running outdated software. This can require a significant investment of resources, particularly when mitigating multiple flaws at the same time.
So if you need  find out that you  have these Vulnerabilities contact us and tell us that you read this blog and get 1 hour Free  IT Aduit.


Comments

Post a Comment

Popular posts from this blog

Emergency Patch Released for SMBv3 Vulnerability

By -
Image
    Emergency Patch Released for SMBv3 Vulnerability Microsoft released the KB4551762 security update to patch the RCE vulnerability found in Microsoft SMBv3 a couple of days after the flaw was disclosed as part of the March 2020 Patch Tuesday. The Windows SMBv3 Remote Code Execution vulnerability, tracked as CVE-2020-0796 and dubbed as SMBGhost, allows a remote and unauthenticated hacker to execute the arbitrary code on an exposed device. Microsoft stated that: "To exploit the vulnerability against a server, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv3 server. To exploit the vulnerability against a client, an unauthenticated attacker would need to configure a malicious SMBv3 server and convince a user to connect to it." Microsoft originally planned to fix the flaw as part of its March 2020 Patch Tuesday update but pulled the plug at the last minute. Now the tech giant followed up with KB4551762 to fix the SMBGhost...
Read more

Windows 7 Extended Security Updates

By -
Image
Windows 7 Extended Security Updates Users who are still running on Windows 7 operating system, are exposing their computers to critical vulnerabilities. Is your business prepared for Windows 7 End-of-Life? Running an unsupported operating system is not an option anymore. Data breaches, systems hacks, and vulnerabilities are very common, and ransomware can bring a business to a halt and every business is a potential risk target. With an unsupported operating system, a business is easier to exploit, leaving the network very exposed. It is best and simple to upgrade to Windows 10 latest version. It has a long life still, and that means many years of support from Microsoft. Organizations will need to anticipate the cost of purchasing the new operating system, but also of their business-critical software to ensure compatibility. As many business and enterprise users are not able to switch from Windows 7 before the End-of-Service, Microsoft intro...
Read more