Security News > 2020 > February > Which vulnerabilities were most exploited by cybercriminals in 2019?

Which ten software vulnerabilities should you patch as soon as possible?

Recorded Future researchers have analyzed code repositories, underground forum postings, dark web sites, closed source reports and data sets comprising of submissions to popular malware repositories to compile a list of the ten most exploited vulnerabilities by cybercriminals in 2019.

The researchers put the popularity of Microsoft vulnerabilities down to a combination of better patching and Flash Player's impending demise in 2020, and noted the importance of patching Microsoft products in a timely manner.

Among other, more recently patched flaws that made the top 20 list are CVE-2019-0841, a privilege escalation vulnerability in the Windows AppX Deployment Service and CVE-2019-3396, a server-side template injection vulnerability in the Atlassian Confluence Server and Data Center Widget Connector that could be used for remote code execution.

With all of this in mind, they advise admins to prioritize the patching of Microsoft products, automatically disable Flash Player wherever possible, remove affected software if it's not needed, and install browser ad-blockers to prevent exploitation via malvertising.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/127LrE4BUA0/