Urgent Advisory: Top 15 Exploited Vulnerabilities of 2023 Revealed

The FBI, NSA, and Five Eyes cybersecurity authorities have issued a joint advisory listing the 15 most exploited vulnerabilities of 2023, many of which were zero-days. This report stresses the necessity for global organizations to address these vulnerabilities promptly and enhance their patch management practices to mitigate cyberattack risks. Particularly concerning is CVE-2023-3519, a code injection vulnerability in Citrix's NetScaler, which has been leveraged by state-sponsored hackers to affect over 2,000 servers. The advisory highlights that despite many of these vulnerabilities being previously addressed, threat actors continue to exploit unpatched flaws, notably affecting major vendors and essential software products.

Opens on Bleeping Computer