Top 10 Routinely Exploited Vulnerabilities

Critical Infrastructure Partners,

As we continue to respond to the pandemic and work towards recovery and reopening, it’s important to remember that malicious cyber actors are taking advantage of the current chaotic environment (and a workforce that is largely working from home) to attack our networks.

The attached joint activity alert (dated May 12th, 2020) provides details on the top 10 vulnerabilities routinely exploited by foreign cyber actors—primarily Common Vulnerabilities and Exposures (CVEs)—to help organizations reduce the risk of these foreign threats. Please feel free to distribute widely, particularly to your IT security professionals .

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the broader U.S. Government are providing this technical guidance to advise IT security professionals at public and private sector organizations to place an increased priority on patching

the most commonly known vulnerabilities exploited by sophisticated foreign cyber actors.

The report is attached, and the full text can also be accessed at the link below.

https://www.us-cert.gov/ncas/alerts/aa20-133a