Cisco Talos Blog: Changing the tide: Reflections on threat data from 2024

Feb 6, 2025

—

Source URL: https://blog.talosintelligence.com/changing-the-tide-reflections-on-threat-data-from-2024/
Source: Cisco Talos Blog
Title: Changing the tide: Reflections on threat data from 2024

Feedly Summary: Thorsten examines last year’s CVE list and compares it to recent Talos Incident Response trends. Plus, get all the details on the new vulnerabilities disclosed by Talos’ Vulnerability Research Team.

AI Summary and Description: Yes

Summary: The text discusses a significant rise in Common Vulnerabilities and Exposures (CVEs) from 2023 to 2024, highlighting the need for stronger security measures. It emphasizes vulnerabilities in important network monitoring systems and the implication of these vulnerabilities on security strategies, particularly in the context of initial access vectors and proper patch management.

Detailed Description:
The analysis provided sheds light on current trends in cybersecurity, specifically focusing on vulnerabilities, incident response, and the importance of regular updates to patched systems. Key takeaways include:

– **Increase in CVEs**: There has been a notable 38% increase in the number of CVEs from 2023 (29,166) to 2024 (40,289), indicating an upward trend in potential security threats.
– **Severity of Vulnerabilities**: The severity levels of CVEs have remained consistent, mostly within the range of 7-8, suggesting that while the number of vulnerabilities has increased, their potential impact has not drastically changed.
– **Stable Exploited Vulnerabilities**: Known exploited vulnerabilities reported by CISA showed relative stability (186 in 2024 vs. 187 in 2023), although there was a 36% increase in critical vulnerabilities scored 9-10, highlighting a heightened risk for severe threats.
– **Initial Access Vectors**: The analysis pointed out that “Exploiting Public Facing Applications” and “Valid Accounts” emerged as the primary vectors for initial access in security incidents, underscoring the need for effective identity and access management practices, such as implementing proper Multi-Factor Authentication (MFA).
– **End-of-Life Considerations**: A reminder was issued regarding the free support ending for Windows 10 on October 14, 2025, advocating for proactive planning and system updates to ensure ongoing security.

**Vulnerability Reports**:
– Cisco Talos disclosed vulnerabilities in three significant applications, Observium and WhatsUp Gold, which are crucial for network monitoring, emphasizing the importance of keeping such systems updated to mitigate exploitation risks.

**Top Security Headlines**:
– Major security incidents analyzed included an embedded backdoor in a patient monitor and the release of Apple software updates for zero-day vulnerabilities, pointing to the pervasiveness of cybersecurity threats across different sectors.

**Practical Implications**:
– Security professionals are urged to closely monitor CVE updates, implement robust security measures, regularly patch vulnerabilities, and stay informed about emerging threats in the cybersecurity landscape.
– The update on critical vulnerabilities serves as a crucial call to action for managing infrastructures effectively to safeguard sensitive data and maintain integrity within institutions.

In conclusion, the increase in vulnerabilities and the emphasis on initial access methods reinforce the necessity for vigilance and the adoption of comprehensive security measures in AI, cloud computing, and infrastructure domains.

1 2 2024 3 4 5 7 a access access management account Act adoption AGI AI analysis and Apple Application applications Arch art as authentication backdoor by C CIA CISA Cisco Cisco Talos closed Cloud cloud computing Common Vulnerabilities Common Vulnerabilities and Exposures Computing Context core critical cross Current CVE cyber Cybersecurity cybersecurity landscape cybersecurity threat cybersecurity threats D data day day vulnerabilities de domain domains e E 3 effective emerging threats end exp exploit Exploitation exploitation risk exploitation risks exploited vulnerabilities Exposures fact factor authentication factor authentication (MFA) for free g Gen Go high Highlight HR http HTTPS identity Identity and Access Management implications in incident incident response infrastructure initial access institutions integrity Intel intelligence ite J k Key Known Exploited Vulnerabilities l land led life management MFA Monitor monitoring monitoring systems multi multi-factor authentication Multi-Factor Authentication (MFA) network network monitoring no o Observium of on opt out Patch Patch Management patient monitor planning point potential practical implications pre proactive professionals public R rate RCE red release report research response Risk risks Ro robust security s search sec security security incident security incidents security landscape security measure security measures security professionals security strategies security threat security threats sensitive data severity side Sig software software update software updates source SSE stability structures system System Updates systems T Tails text the threat threat data threats to Tor TP trends two up update updates US uth V val vectors vigilance vulnerabilities vulnerability vulnerability research WhatsUp Gold Wi Wind Windows Windows 10 x zero zero-day Zero-Day Vulnerabilities