Top Exploited Cybersecurity Vulnerabilities of 2020 and 2021 (So Far)

As an urgent, one-time exercise, VPLS recommends reviewing the two lists above and determining if your organization is running affected products/software. If you are, the next steps would be to patch the software to a version that is not vulnerable to the listed CVEs. In addition to patching, other mitigation steps may be necessary to protect against the vulnerability being exploited, such as a configuration change, and those will be documented in the vendor’s related security advisory.

Going forward, organizations should implement a continuous vulnerability management practice if one is not already in place. A mature cybersecurity program includes vulnerability management, which is the ongoing practice of identifying, classifying, prioritizing, remediating, and mitigating software vulnerabilities.

For organizations that require guidance on vulnerability management, or simply don’t have the time to dedicate to this critical task, VPLS can perform vulnerability management for your IT department with convenient monthly or one-time services. For example, many of our customers leverage the vulnerability management practices included with our SOC as a Service, which includes scanning (identifying, classifying, and prioritizing) for vulnerabilities across all assets that belong to the organization.

Extending VPLS’s SOC-as-a-Service with our Managed Firewall and Managed Network services, or Managed Servers and Managed Desktops services, will ensure that VPLS is proactively remediating and mitigating the vulnerabilities related to these products for your organization so you are always one step ahead of threat actors and their malicious intentions.