New Study Finds That Ransomware Attacks Are Heavily Relying on Old Vulnerabilities; Unpatched Issues Dating Back to 2010 Still Exploited

A new joint study from several leading cybersecurity firms has found that cyber criminals are spending most of their time going for low-hanging fruit: old vulnerabilities that organizations have just not got around to patching. 76% of ransomware attacks in 2022 were tied to a known vulnerability that was made public between 2010 and 2019, and vulnerabilities that were discovered as far back as 2015 are still commonly exploited. The study has a number of other interesting findings that should prompt organizations to immediately get on top of their patching of old vulnerabilities, not the least of which is that advanced persistent threat (APT) groups are showing increased interest in the ransomware game. Over a dozen started implementing ransomware attacks into their mix of activities in 2022, a 51% increase from 2020.

https://www.cpomagazine.com/cyber-security/new-study-finds-that-ransomware-attacks-are-heavily-relying-on-old-vulnerabilities-unpatched-issues-dating-back-to-2010-still-exploited/