Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted
This Security Boulevard article from November 2024 covers a Five Eyes report, released by CISA, finding most top exploited vulnerabilities in 2023 were initially zero-days. Casey Ellis, founder and advisor at Bugcrowd, says the zero-day label wrongly implies defenders cannot act, and urges treating these flaws as patch management problems.
Source description, as published
A report from the Five Eyes cybersecurity alliance, released by the CISA, highlights the majority of the most exploited vulnerabilities last year were initially zero-day flaws, a significant increase compared to 2022 when less than half of the top vulnerabilities were zero-day exploits.
Inventors / authors: Nathan Eddy