Security News > 2021 > July > Top CVEs Trending with Cybercriminals

In its report, researchers highlight what CVEs are the most frequently mentioned and try to determine where attackers might strike next.

"Our findings revealed that there is no 100 percent correlation between the two parameters, since the top five CVEs that received the highest number of posts are not exactly the ones that were mentioned on the highest number of Dark Web forums examined," the report said.

"Most of the CVEs in this list were abused by nation-state groups and cybercriminals, such as ransomware gangs, during worldwide campaigns against different sectors," the report said.

Notably, all the CVEs threat actors are still focused on are old, meaning that basic patching and mitigation could have stopped many attacks before they even got started.

The analysts explained varying CVEs were more talked about depending on the forum language.

The researchers add, for context, that about half of the monitored forums were Russian-speaking and that Spanish forums aren't mentioned because there wasn't a clear frontrunning CVE discussed.

News URL

https://threatpost.com/top-cves-trending-with-cybercriminals/167889/