A dramatic surge in vulnerabilities within Linux and macOS was reported in 2024, signifying a pivotal shift in the security landscape of these traditionally safer UNIX-based systems. According to the latest Action1 Software Vulnerability Ratings Report, a 61% increase pushed the total across both platforms to 6,761. Linux vulnerabilities rose an astonishing 967% to 3,329, and macOS saw a 95% jump to 508. This escalation underscores a growing concern for cybersecurity within these environments.
This trend was not limited to Linux and macOS but extended to other systems as well. Notably, the exploitation of vulnerabilities surged by 96%, significantly affecting web browsers and Microsoft Office. Google Chrome experienced an 1840% spike, with Microsoft Office seeing a 433% rise in exploited vulnerabilities. Critical vulnerabilities on multiple platforms, especially within Linux and MSSQL databases, increased by 37%, up to 2,930 in 2024. Database vulnerabilities showed a 213% annual rise, primarily influenced by MSSQL and MySQL.
There was also a notable increase in remote code execution vulnerabilities in web browsers by 107%, although there was a slight overall rise of 7% in RCEs. The reduction in RCE vulnerabilities for Linux and macOS, dropping by 85% and 44% respectively, offered a glimmer of hope despite the escalating risks.
Action1 highlights the urgent need for robust security measures to combat these risks. They recommend prioritizing patching critical systems, comprehensive vulnerability management, and enhanced threat detection. Emphasizing employee education on security protocols, thorough vendor risk assessments, and a strong patch deployment process is deemed essential to strengthen organizational defenses.
The significant rise in vulnerabilities across various platforms, particularly Linux and macOS, signifies a critical moment for cybersecurity. There is a pressing need for adaptive and comprehensive security practices geared towards mitigating evolving threats and protecting organizational integrity.
