Meridiano
A new Google report reveals a record high of 48% of tracked zero-day vulnerabilities in 2023 targeted enterprise technologies, with half of those exploiting the security and networking devices designed to protect corporate networks. Hackers frequently targeted products from vendors like Cisco, Fortinet, Ivanti, and VMware, exploiting common flaws to breach defenses.
The remaining enterprise zero-days involved other software, such as Oracle's E-Business Suite, which was exploited in a campaign stealing HR data from major organizations. The other 52% of zero-days affected consumer products from companies like Microsoft, Google, and Apple, primarily in operating systems.
The report also noted a shift, with more zero-days attributed to commercial surveillance vendors selling hacking tools to governments than to traditional state-backed espionage groups.
Main topics: Enterprise cybersecurity threats, zero-day vulnerabilities, targeted vendors and attack methods, consumer software vulnerabilities, the rise of commercial surveillance vendors.
