Report Identifies Vulnerabilities Popular on Criminal Forums

guest · Jul 22, 2021

Report Identifies Vulnerabilities Popular on Criminal Forums
Cognyte Identifies Top 6 Flaws, Including One That's 17 Years Old
July 21, 2021
https://www.inforisktoday.com/report-identifies-vulnerabilities-popular-on-criminal-forums-a-17118

Researchers at security analytics provider Cognyte identified the six common vulnerabilities and exposures - or CVEs - that were most frequently discussed by apparent cyberattackers on dark web forums between Jan. 1, 2020 and March 1, 2021. Five of these CVEs were for Microsoft products.

Cognyte examined discussions on 15 English, Russian, Turkish, Chinese and Spanish deep and dark web forums to determine the CVEs that had the most mentions and the widest distribution - mentions on multiple forums in different languages. It did not take into account replies to the posts.
Click to expand...

The Microsoft flaws were:
• CVE-2020-1472, aka ZeroLogon
• CVE-2020-0796, aka SMBGhost
• CVE-2019-0708, aka BlueKeep
• CVE-2017-11882
• CVE-2017-0199
• The sixth flaw highlighted in the Cognyte report, CVE-2019-19781, affects the Citrix Application Delivery Controller formerly known as NetScaler ADC. An exploit could allow an unauthenticated attacker to connect remotely and execute arbitrary code on the affected computer.
Click to expand...

Most CVEs on the list apparently were exploited by both nation-state groups and cybercriminals, such as ransomware gangs, during worldwide campaigns in various sectors, the report says.

"Our findings also showed that even a long time after relevant updates were released, CVEs are still popular on dark web platforms, such as CVE-2017-11882, which received the widest distribution with mentions in 12 out of 15 forums examined," the report says.
Click to expand...

Cognyte: Top CVEs Trending with Cybercriminals

ThreatPost covered our latest common vulnerabilities and exposures (CVEs) threat research report, that includes an in-depth analysis of the most popular CVEs among threat actors in the past 1.5 years, published July 2021.

Read the article here.
Click to expand...

Log in or Sign up

Report Identifies Vulnerabilities Popular on Criminal Forums

guest Guest

Log in or Sign up

Report Identifies Vulnerabilities Popular on Criminal Forums

guest Guest

Useful Searches