{"id":29510,"date":"2023-04-05T17:22:17","date_gmt":"2023-04-05T17:22:17","guid":{"rendered":"https:\/\/www.esecurityplanet.com\/?p=29510"},"modified":"2023-04-05T17:22:19","modified_gmt":"2023-04-05T17:22:19","slug":"millions-of-systems-exposed-to-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.esecurityplanet.com\/threats\/millions-of-systems-exposed-to-vulnerabilities\/","title":{"rendered":"Over 15 Million Systems Exposed to Known Exploited Vulnerabilities"},"content":{"rendered":"\n

Effective vulnerability management<\/a> is about knowing what you own and prioritizing what you need to fix. A new research report shows that millions of organizations are failing at those critical cybersecurity practices.<\/p>\n\n\n\n

Researchers at cybersecurity firm Rezilion found<\/a> more than 15 million instances in which systems are vulnerable to the 896 flaws listed in the U.S. Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities Catalog<\/a>.<\/p>\n\n\n\n

Tens of thousands of new security vulnerabilities are discovered each year; the value of CISA’s KEV catalog is that it helps organizations prioritize the software and firmware flaws that threat groups are actively exploiting \u2014 and many of those exploited flaws are older ones that users have failed to apply patches for. The Rezilion report is the latest evidence that practices like IT asset management<\/a> and patch management<\/a> are critical cybersecurity processes that organizations need to be better at.<\/p>\n\n\n\n

The majority of the exposed vulnerabilities Rezilion found are Microsoft Windows instances, with 137 vulnerabilities, followed by Adobe Flash player (29 vulnerabilities) and Microsoft Internet Explorer (24).<\/p>\n\n\n\n

While the flaws in the KEV Catalog comprise less than 1 percent of the vulnerabilities discovered each year, Rezilion notes, those flaws are often the most actively exploited by APT groups<\/a> and other threat actors, many of them linked to nation states including Russia, Iran, China, and North Korea.<\/p>\n\n\n\n

See the top <\/em>vulnerability management<\/em><\/a> and <\/em>patch management<\/em><\/a> tools<\/em><\/p>\n\n\n\n

Top Vulnerabilities<\/h2>\n\n\n\n

The top flaws in terms of ongoing exploitation attempts in the last 30 days include the following:<\/p>\n\n\n\n