Insecure Protocols Being Used Across Wide Area Networks
Web traffic still run over HTTP as older vulnerabilities are most troublesome.
Organisations continue to run insecure protocols across their wide access networks (WAN), making it easier for cybercriminals to move across networks.
Analysis of 1.26 trillion network flows by Cato Networks found 62% of all web application traffic is run over HTTP, and 46% of all traffic is run over SMB v1 or v2, instead of SMBv3.
Also when evaluating the top ten inbound common vulnerabilities and exposures (CVEs), a seven-year-old attack targeting the PHPUnit testing framework (CVE-2017-9841) was the most common, and it was found across 33% of the inbound CVE exploitations observed.
Furthermore, three years after its discovery, Log4J (CVE-2021-44228) remains one of the most used exploits and it was found across 30% of the outbound CVE exploitations observed.Related content
British Organisations Targeted by Fresh APT41 Attacks
Attackers Exploit Maximum Severity Flaw in Attacks on Network Security
Life360 Customer Details Leaked Following API Breach
Q2 Sees More Organisations Listed on Ransomware Leak Sites
SMEs Struggle with Cyber Attacks in 2024
Another regreSSHion-like Bug Identified in OpenSSH
Businesses Struggle to Share Threat Intelligence
Upcoming Events
How to Automate the Lifecycle of Joiners, Movers, and Leavers With No-Code Solutions
Streamlining the lifecycle of joiners, movers, and leavers using no-code automation
In this live webinar, we will look at how to streamline these processes to save time and resources, and providing a smooth experience for both admins and employees.
- Understanding the importance of securing the joiners, movers and leavers process
- Exploring successful attacks that occurred due to errors in managing these transitions
- Discover which advanced controls can be utilized
Confirm cancellation
An error occurred trying to play the stream. Please reload the page and try again.
CloseSign up benefits
Registering with SC Media is 100% free. Join tens of thousands of cybersecurity leaders today and gain access to the latest analysis shaping the global infosec agenda.
- Weekly newsletters featuring industry-leading insight
- Access to free cyber expert webinars and videos
- Privileged viewership of special reports, such as the Annual Cyber Salary Survey and Women of Influence