Ransomwarecritical
Quarterly Report: Incident Response trends from Spring 2021
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-18935 | Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2020-5902 | Unauthenticated RCE via path traversal in F5 BIG-IP TMUI | 9.8 | 100% | KEVRansomwarePoC ×8 | KEV |
| CVE-2021-24085 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | 5% | ||
CVE-2021-26855+3 related CVEs | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 group max | 100% | KEVRansomwarePoC ×4 | KEV |
From the original article
6 min read at blog.talosintelligence.com
While the security community made a great effort to warn users of the exploitation of several Microsoft Exchange Server zero-day vulnerabilities , it was still the biggest threat Cisco Talos Incident Response (CTIR) saw this past quarter. These vulnerabilities, tracked as CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065, comprised around 35 percent of all incidents investigated.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.