It’s an ongoing challenge for security practitioners: You want to keep all systems up-to-date and secure, but limited resources, legacy systems, and slow patching processes hold you back.
To aid in patch management strategy, researchers with Verint’s Cyber Threat Intelligence (CTI) Group analyzed the top 20 vulnerabilities currently exploited by global attack groups. Forty-five percent affect Microsoft products, and some bugs used in successful attacks date back to 2012.
The National Vulnerability Database (NVD) reports 16,514 vulnerabilities were disclosed in 2018, indicating an average of roughly 45 new bugs per day. Additional data shows nearly 60% of all flaws are classified as Critical or High severity, Verint researchers explain in a blog post.