Multi-nation security agencies disclose: Top 15 most routinely exploited vulnerabilities by attackers in 2021

On April 27, cybersecurity agencies from multiple countries jointly released a list of the TOP 15 vulnerabilities most frequently exploited by cybercriminals in 2021, urging organizations to patch these security flaws in a timely manner and implement patch management systems to reduce their attack surface.

Globally, attackers have been observed leveraging exploits targeting newly disclosed vulnerabilities, focusing their attacks on internet-facing systems, including email and Virtual Private Network (VPN) servers.

According to the report, cybersecurity authorities in the United States, Australia, Canada, New Zealand, and the United Kingdom assessed that in 2021, cyberattacks involved a broad set of targets, including public and private sector organizations worldwide, actively targeting newly disclosed critical software vulnerabilities.

This is likely because malicious actors and security researchers released POC-validated exploits within two weeks of most of the most-exploited vulnerabilities being first disclosed in 2021.

However, attackers focused some of their attacks on older vulnerabilities patched years ago, indicating that even when patches are available, some organizations fail to update their systems.

▌Below are the 15 most frequently exploited security vulnerabilities:

According to the US Cybersecurity and Infrastructure Security Agency (CISA): "We know that cyber actors will continue to target these same critical software vulnerabilities until companies and organizations address them."

"We urge all organizations to assess the effectiveness of their security defenses and take action to mitigate the risks of disclosed vulnerabilities."

SecXun Security Lab tracks internet hacker groups and vulnerabilities 24/7, reconstructing thousands of valuable attack techniques, and flexibly orchestrating test scripts to help customers leverage these real attack scenarios to validate the effectiveness of their defense systems.

As a security monitoring platform, the SecXun Security Metrics and Validation Platform can continuously test, measure, and improve cybersecurity efficiency. At the same time, it provides measurement tools for the IT environment, conducting repeatable and continuous end-to-end testing with reference to real attacks, thereby verifying that deployed security measures are working as expected, and proactively discovering the impact of changes in the environment to trigger alerts.

| Reference Sources

https://www.bleepingcomputer.com/news/security/cybersecurity-agencies-reveal-top-exploited-vulnerabilities-of-2021/

https://www.