Hackers continue to target zero-day vulnerabilities

Unpatched vulnerabilities remain the most prominent attack vectors exploited by ransomware groups, according to a new report. The study by Ivanti, produced in conjunction with Cyber Security Works, shows 65 new vulnerabilities tied to ransomware last year, representing a 29 percent growth compared to the previous year and bringing the total number of vulnerabilities associated with ransomware to 288. What's more, hackers are finding zero days even before they get added to the National Vulnerability Database. The QNAP (CVE-2021-28799), Sonic Wall (CVE-2021-20016), Kaseya (CVE-2021-30116), and most recently Apache Log4j (CVE-2021-44228) vulnerabilities were exploited before they made it on to the… [Continue Reading]