Rapid7, Inc., a provider of security analytics and automation announced the release of its latest Vulnerability Intelligence Report examining the 50 most notable security vulnerabilities and high-impact cyber attacks in 2021.
On any given day, security professionals must prioritise and address viable threats from an overwhelming number of reported vulnerabilities.
Understanding security threats
Rapid7 researchers analyse thousands of vulnerabilities each year to understand root causes, dispel misconceptions, and share information on why certain flaws are more likely to be exploited than others. From this research, the team creates a report of the highest priority CVEs based on their likelihood of widespread exploitation.
“We research and publish this report to contextualise the vulnerabilities that introduce serious risk to a wide range of organisations,” said vulnerability research manager and lead Vulnerability Intelligence Report author, Caitlin Condon. “Our goal is to highlight exploitation trends, explore attacker use cases, and offer a framework for understanding new security threats as they arise.”
Highlights of the Vulnerability Intelligence Report
The report highlights 50 vulnerabilities from 2021 that posed a considerable risk to businesses of all sizes
The Rapid7 2021 Vulnerability Intelligence Report highlights 50 vulnerabilities from 2021 that posed a considerable risk to businesses of all sizes. Of those 50 vulnerabilities, 43 were exploited in the wild. Furthermore, vulnerabilities classified as “widespread threats” for the scale at which they were exploited increased 136% over the previous year.
Key findings from the research report include:
- Broad, opportunistic exploitation increased significantly in 2021. 66% of vulnerabilities in this report were classified as widespread threats, compared to only 28% in 2020.
- More than 60% of widespread threats cited in this report have been used in ransomware operations, and more than half of widespread threats began with a zero-day exploit.
- More than half (52%) of the known exploited vulnerabilities in this report came under attack within one week of public disclosure, and the average time to known exploitation decreased from 42 days in 2020 to just 12 days in 2021.
“In years past, vulnerabilities and hacking incidents led to fewer widespread attacks,” added Condon. "The recent increase in ransomware, coin mining, and other widespread attacks means the probability of an 'average business' being targeted has correspondingly increased.”
- Network / IP
- Industrial security
- Private sector security
- Public sector security
- Security management
- Security monitoring system
- Public security
- Industrial security systems
- Security software
- Hybrid security
- Industrial surveillance
- Hybrid surveillance systems
- Security communication
- Integration software
- Cyber security
- Crime prevention
- Crowd Management
- Corporate Security
- Data Security
- Cloud security
