Ransomwarecritical
Cyberthreats to financial organizations in 2022
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-5544 | Heap-Based Buffer Overflow in OpenSLP Used by VMware ESXi and Horizon DaaS | 9.8 | 98% | KEVRansomware | KEV |
| CVE-2020-3992 | Use-After-Free RCE in VMware ESXi OpenSLP Service (Port 427) | 9.8 | 83% | KEVRansomware | KEV |
| CVE-2021-30116 | Credential Disclosure via Unauthenticated Download Page in Kaseya VSA | 9.8 | 86% | KEVRansomwarePoC | KEV |
| CVE-2021-42258 | Unauthenticated SQL Injection RCE in BQE BillQuick Web Suite | 9.8 | 75% | KEVRansomwarePoC | KEV |
From the original article
13 min read at securelist.com
First of all, we are going to analyze the forecasts we made at the end of 2020 and see how accurate they were. Then we will go through the key events of 2021 relating to attacks on financial organizations. Finally, we will make some forecasts about financial attacks in 2022.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.