{"id":42091,"date":"2021-07-29T06:26:12","date_gmt":"2021-07-29T06:26:12","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/heres-a-list-of-the-flaws-russia-china-iran-and-pals-exploit-most-often-say-five-eyes-infosec-agencies\/"},"modified":"2021-07-29T06:26:12","modified_gmt":"2021-07-29T06:26:12","slug":"heres-a-list-of-the-flaws-russia-china-iran-and-pals-exploit-most-often-say-five-eyes-infosec-agencies","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/heres-a-list-of-the-flaws-russia-china-iran-and-pals-exploit-most-often-say-five-eyes-infosec-agencies\/","title":{"rendered":"Here’s a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies"},"content":{"rendered":"

Western cybersecurity agencies have published a list of 30 of the most exploited vulnerabilities abused by hostile foreign states in 2020, urging infosec bods to ensure their networks and deployments are fully patched against them.<\/p>\n

Number one on the US, UK, and Australia’s jointly published [PDF<\/a>] list was the well-known Citrix arbitrary code execution vuln in Application Delivery Controller, aka Netscaler<\/a> load-balancer. Tracked as CVE-2019-19781, the vuln has been the subject of repeated patch-it-now warnings<\/a> ever since.<\/p>\n

“In 2021, malicious cyber actors continued to target vulnerabilities in perimeter-type devices. Among those highly exploited in 2021 are vulnerabilities in Microsoft, Pulse, Accellion, VMware, and Fortinet,” said the US’s CISA and FBI, Britain’s NCSC, and Australia’s ACSC, three of the Five Eyes<\/a> alliance.<\/p>\n