{"id":88880,"date":"2024-01-29T13:18:03","date_gmt":"2024-01-29T19:18:03","guid":{"rendered":"https:\/\/arcticwolf.com\/the-most-exploited-vulnerabilities-of-2023\/"},"modified":"2024-10-14T16:08:13","modified_gmt":"2024-10-14T21:08:13","slug":"the-most-exploited-vulnerabilities-of-2023","status":"publish","type":"page","link":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/","title":{"rendered":"The Most Exploited Vulnerabilities of 2023"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"88880\" class=\"elementor elementor-88880 elementor-87275\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-1c854efd rbr23-loader elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1c854efd\" data-element_type=\"section\" data-e-type=\"section\" id=\"loader-wrapper\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-330d9212\" data-id=\"330d9212\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2118bdb0 elementor-widget elementor-widget-html\" data-id=\"2118bdb0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<!-- PRELOADER ANIMATION\n\t\t============================================= -->\n  <div id=\"loading\">\n\t\n            <div class=\"loading-screen webinar-branded\">\n                <div class=\"loading-animation\">\n                  <div class=\"logo\">\n                  <img decoding=\"async\" src=\"\/wp-content\/uploads\/2023\/12\/AW-MR-Vuln-LP-Loader-Logo-02-231218.png\" alt=\"Arctic Wolf Top Vulnerabilties of 2023\" class=\"dont-be-lazy\"\/>\n\n                  <\/div>\n                  <div class=\"loading-bar\">\n\n                  <\/div>\n                <\/div>\n              <\/div>\n\t\n\t<\/div>\n\n\n\n\n<style>\n\n#loading .logo {\n    max-width: 600px;\n    width:90%;\n    margin:auto;\n}\n#loader-wrapper {\n  position: fixed;\n  top: 0;\n  left: 0;\n  width: 100%;\n  height: 100%;\n  z-index: 99999999999;\n}\n\n#loading {\n  background-color: transparent;\n  height: 100%;\n  width: 100%;\n  position: fixed;\n  z-index: 99999999;\n  margin-top: 0px;\n  top: 0px;\n}\n\n\n\n\n@keyframes cssload-loader {\n  0% {\n    transform: rotate(0deg);\n  }\n  \n  25% {\n    transform: rotate(180deg);\n  }\n  \n  50% {\n    transform: rotate(180deg);\n  }\n  \n  75% {\n    transform: rotate(360deg);\n  }\n  \n  100% {\n    transform: rotate(360deg);\n  }\n}\n\n@-o-keyframes cssload-loader {\n  0% {\n    transform: rotate(0deg);\n  }\n  \n  25% {\n    transform: rotate(180deg);\n  }\n  \n  50% {\n    transform: rotate(180deg);\n  }\n  \n  75% {\n    transform: rotate(360deg);\n  }\n  \n  100% {\n    transform: rotate(360deg);\n  }\n}\n\n@-ms-keyframes cssload-loader {\n  0% {\n    transform: rotate(0deg);\n  }\n  \n  25% {\n    transform: rotate(180deg);\n  }\n  \n  50% {\n    transform: rotate(180deg);\n  }\n  \n  75% {\n    transform: rotate(360deg);\n  }\n  \n  100% {\n    transform: rotate(360deg);\n  }\n}\n\n@-webkit-keyframes cssload-loader {\n  0% {\n    transform: rotate(0deg);\n  }\n  \n  25% {\n    transform: rotate(180deg);\n  }\n  \n  50% {\n    transform: rotate(180deg);\n  }\n  \n  75% {\n    transform: rotate(360deg);\n  }\n  \n  100% {\n    transform: rotate(360deg);\n  }\n}\n\n@-moz-keyframes cssload-loader {\n  0% {\n    transform: rotate(0deg);\n  }\n  \n  25% {\n    transform: rotate(180deg);\n  }\n  \n  50% {\n    transform: rotate(180deg);\n  }\n  \n  75% {\n    transform: rotate(360deg);\n  }\n  \n  100% {\n    transform: rotate(360deg);\n  }\n}\n\n@keyframes cssload-loader-inner {\n  0% {\n    height: 0%;\n  }\n  \n  25% {\n    height: 0%;\n  }\n  \n  50% {\n    height: 100%;\n  }\n  \n  75% {\n    height: 100%;\n  }\n  \n  100% {\n    height: 0%;\n  }\n}\n\n@-o-keyframes cssload-loader-inner {\n  0% {\n    height: 0%;\n  }\n  \n  25% {\n    height: 0%;\n  }\n  \n  50% {\n    height: 100%;\n  }\n  \n  75% {\n    height: 100%;\n  }\n  \n  100% {\n    height: 0%;\n  }\n}\n\n@-ms-keyframes cssload-loader-inner {\n  0% {\n    height: 0%;\n  }\n  \n  25% {\n    height: 0%;\n  }\n  \n  50% {\n    height: 100%;\n  }\n  \n  75% {\n    height: 100%;\n  }\n  \n  100% {\n    height: 0%;\n  }\n}\n\n@-webkit-keyframes cssload-loader-inner {\n  0% {\n    height: 0%;\n  }\n  \n  25% {\n    height: 0%;\n  }\n  \n  50% {\n    height: 100%;\n  }\n  \n  75% {\n    height: 100%;\n  }\n  \n  100% {\n    height: 0%;\n  }\n}\n\n@-moz-keyframes cssload-loader-inner {\n  0% {\n    height: 0%;\n  }\n  \n  25% {\n    height: 0%;\n  }\n  \n  50% {\n    height: 100%;\n  }\n  \n  75% {\n    height: 100%;\n  }\n  \n  100% {\n    height: 0%;\n  }\n}\n\n\n\n\n\/* OPTION 2 Loader*\/\n\n.loading-screen {\n    position: fixed;\n    left: 0;\n    top: 0;\n    width: 100%;\n    display: flex;\n    height: 100vh;\n    background: transparent;\n    align-items: center;\n    justify-content: center;\n    text-align: center;\n}\n.loading-screen .loading-animation .loading-bar {\n    position: relative;\n    width: 230px;\n    height: 3px;\n    background: #ffffff30;\n    margin:auto;\n    margin-top: 22px;\n    overflow: hidden;\n}\n\/*.loading-animation {\n    margin-bottom: -25%;\n}*\/\n.loading-animation {\n    margin-top: 0%;\n}\n.loading-screen .loading-animation .loading-bar::before {\n    content: \"\";\n    background: #4cbefc;\n    width: 180px;\n    height: 3px;\n    left: -34px;\n    position: absolute;\n    animation: bluebar 1.5s infinite ease;\n}\n@keyframes bluebar {\n50% {\nleft: 96px;\n}\n}\n#glitch-intro-img.active-glitch img {\n    opacity: 1.0 !important;\n}\ndiv#glitch-intro-img {\n    position: relative;\n    height: 100vh;\n}\n<\/style>\n\n<script>\n\n\n\n\tjQuery(document).ready(function() {\n\t\t\t\n\t\t\"use strict\";\n\t\t\n\t\t\n\t\t\/*----------------------------------------------------*\/\n\t\t\/*\tPreloader\n\t\t\/*----------------------------------------------------*\/\n\t\t\n\t\tvar preloader = jQuery('#loader-wrapper'),\n\t\t\tloader = preloader.find('.cssload-loader');\n\t\t\tloader.fadeOut();\n\t\t\tpreloader.delay(6000).fadeOut('slow');\n\n\t});\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-efb6c24 elementor-section-height-min-height elementor-section-items-stretch elementor-section-boxed elementor-section-height-default\" data-id=\"efb6c24\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ea64bcb\" data-id=\"ea64bcb\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;animation_tablet&quot;:&quot;fadeInUp&quot;,&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-02f5420 elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"02f5420\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;fadeInDown&quot;,&quot;animation_mobile&quot;:&quot;fadeInUp&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-922382f\" data-id=\"922382f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6dbbe3f elementor-widget elementor-widget-heading\" data-id=\"6dbbe3f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_mobile&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Arctic Wolf <span class=\"gr-text\">Presents<\/span><\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c15e37 elementor-widget elementor-widget-heading\" data-id=\"3c15e37\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;,&quot;_animation_mobile&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">The Most Exploited Vulnerabilities of 2023 <\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-81f1971 elementor-widget elementor-widget-text-editor\" data-id=\"81f1971\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_mobile&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022. With so many vulnerabilities in play, which ones offered the greatest risk to organisations \u2014 and the greatest potential reward for threat actors?\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;#top-vulnerabilities&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" class=\"elementor-element elementor-element-eb5bc35 elementor-widget__width-inherit smoothScroll elementor-widget elementor-widget-text-editor\" data-id=\"eb5bc35\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_mobile&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tCheck out our list of the <span class=\"gr-text\">30 most exploited vulnerabilities of 2023<\/span> and find out.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-656f3c5 elementor-align-center gr-button smoothScroll elementor-hidden-desktop elementor-hidden-tablet elementor-widget elementor-widget-button\" data-id=\"656f3c5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"#top-vulnerabilities\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-down\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">View The List<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e7283c smoothScroll elementor-hidden-mobile premium-lottie-svg elementor-invisible elementor-widget elementor-widget-premium-lottie\" data-id=\"8e7283c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;,&quot;_animation_delay&quot;:800}\" data-widget_type=\"premium-lottie.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\t\t<div class=\"premium-lottie-animation\" data-lottie-url=\"https:\/\/assets8.lottiefiles.com\/packages\/lf20_sb7jxp4m.json\" data-lottie-loop=\"true\" data-lottie-loop-times=\"\" data-lottie-reverse=\"\" data-lottie-hover=\"\" data-lottie-speed=\"1\" data-lottie-render=\"svg\" data-lottie-delay=\"\">\n\t\t\t\t\t\t\t<a href=\"#top-vulnerabilities\"><\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-a1010d6 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a1010d6\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-581cf30\" data-id=\"581cf30\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;animation&quot;:&quot;none&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-c013b27 demo-request-shapes elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"c013b27\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;fadeInUp&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-f1e6ba0\" data-id=\"f1e6ba0\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-42db80c elementor-widget elementor-widget-heading\" data-id=\"42db80c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">YoY Vulnerability CVSS v3 Severity Breakdown<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-abea112 elementor-widget elementor-widget-heading\" data-id=\"abea112\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">* For CVEs published in the last 10 years<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e1b56e3 elementor-widget elementor-widget-heading\" data-id=\"e1b56e3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">More troubling than the sheer volume of vulnerabilities in 2023 is that over half of them were given a CVSS score indicating high or critical severity \u2014 an increase of 57% YoY. Exploiting these vulnerabilities proved lucrative for threat actors around the world and wrought significant reputational, financial, and operational damage on the organisations they attacked. As organisations establish their cybersecurity priorities for 2024, it\u2019s vital they look back at how vulnerabilities became data breaches in 2023.  <\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-3850d74\" data-id=\"3850d74\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-dedc985 elementor-section-height-min-height elementor-section-content-middle elementor-section-boxed elementor-section-height-default\" data-id=\"dedc985\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-d5c4d45\" data-id=\"d5c4d45\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b62169 elementor-widget elementor-widget-image\" data-id=\"5b62169\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"822\" height=\"693\" src=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW_2023-vuln-chart-1.png\" class=\"attachment-large size-large wp-image-88883\" alt=\"\" srcset=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW_2023-vuln-chart-1.png 822w, https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW_2023-vuln-chart-1-300x253.png 300w\" sizes=\"(max-width: 822px) 100vw, 822px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8c861d elementor-widget elementor-widget-text-editor\" data-id=\"c8c861d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tData as of 1\/2\/24 <span class=\"aw-table-source-spacer\">|<\/span> <span class=\"aw-table-source\"><a href=\"https:\/\/www.cvedetails.com\/\" target=\"_blank\" rel=\"noopener\">Source: cvedetails.com<\/a><\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-0d5c40e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0d5c40e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b8e7d0e\" data-id=\"b8e7d0e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1f8c61e elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"1f8c61e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;,&quot;_animation_delay&quot;:100}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">A look at the <span class=\"gr-text\">Top 30<\/span><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae7cf73 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"ae7cf73\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;,&quot;_animation_tablet&quot;:&quot;fadeIn&quot;,&quot;_animation_delay&quot;:200}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">In our list of the 30 most exploited vulnerabilities of the year, you'll uncover trends and insights you can use to guide your remediation and vulnerability management plans in the new year. You\u2019ll also discover the fundamentals too many organisations are missing and learn how to leverage them to reinforce your cybersecurity foundation and amplify your resilience. \n\n <\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1704c4ca elementor-widget elementor-widget-html\" data-id=\"1704c4ca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<a name = \"aw_filter_reset_anchor\" id = \"aw_filter_reset_anchor\"><\/a>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-11a78db4 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"11a78db4\" data-element_type=\"section\" data-e-type=\"section\" id=\"top-vulnerabilities\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-7e6dd697 filters-navy-mobile\" data-id=\"7e6dd697\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e05de77 elementor-position-inline-start elementor-mobile-position-inline-start icon-inline elementor-view-default elementor-widget elementor-widget-icon-box\" data-id=\"e05de77\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-box-wrapper\">\n\n\t\t\t\t\t\t<div class=\"elementor-icon-box-icon\">\n\t\t\t\t<span  class=\"elementor-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-sliders-h\"><\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t<div class=\"elementor-icon-box-content\">\n\n\t\t\t\t\t\t\t\t\t<h3 class=\"elementor-icon-box-title\">\n\t\t\t\t\t\t<span  >\n\t\t\t\t\t\t\tFilters\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-54b8ca27 elementor-widget elementor-widget-html\" data-id=\"54b8ca27\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"aw-filters-reset aw-filters-reset-body-area\" onclick=\"aw_filter_reset()\"><i aria-hidden=\"true\" class=\"fas fa-times\"><\/i> Clear filters<\/span>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-334838b aw-vuln-accordion-styles elementor-widget elementor-widget-html\" data-id=\"334838b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"aw-filters-tabs\">\n      <div class=\"aw-filters-tab\">\n        <input type=\"checkbox\" id=\"chck1\" class=\"faux-input\">\n        <label class=\"aw-filters-tab-label\" for=\"chck1\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-box-open\"><\/i> Vendor<\/label>\n        <div class=\"aw-filters-tab-content\">\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-adobe\"><span class=\"checkmark\"><\/span> Adobe<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-apache\"><span class=\"checkmark\"><\/span> Apache<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-atlassian\"><span class=\"checkmark\"><\/span> Atlassian<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-barracuda-networks\"><span class=\"checkmark\"><\/span> Barracuda Networks<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-cisco\"><span class=\"checkmark\"><\/span> Cisco<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-citrix\"><span class=\"checkmark\"><\/span> Citrix<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-f5\"><span class=\"checkmark\"><\/span> F5<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-fortinet\"><span class=\"checkmark\"><\/span> Fortinet<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-fortra\"><span class=\"checkmark\"><\/span> Fortra<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-ivanti\"><span class=\"checkmark\"><\/span> Ivanti<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-jetbrains\"><span class=\"checkmark\"><\/span> JetBrains<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-microsoft\"><span class=\"checkmark\"><\/span> Microsoft<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-owncloud\"><span class=\"checkmark\"><\/span> ownCloud<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-papercut\"><span class=\"checkmark\"><\/span> PaperCut<\/label>\n\t\t\t<label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-progress\"><span class=\"checkmark\"><\/span> Progress<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-qlik\"><span class=\"checkmark\"><\/span> Qlik<\/label>\n\t\t\t<label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-sysaid\"><span class=\"checkmark\"><\/span> SysAid<\/label>\n\t\t\t<label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-vmware\"><span class=\"checkmark\"><\/span> VMware<\/label>\n\t\t\t<label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".vendor-zyxel\"><span class=\"checkmark\"><\/span> Zyxel<\/label>\n        <\/div>\n      <\/div>\n\t\n      <div class=\"aw-filters-tab\">\n        <input type=\"checkbox\" id=\"chck2\" class=\"faux-input\">\n        <label class=\"aw-filters-tab-label\" for=\"chck2\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-chart-area\"><\/i> Score Range <span class=\"hide-tablet\">v3<\/span><\/label>\n        <div class=\"aw-filters-tab-content\">\n            <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".data-score-44\"><span class=\"checkmark\"><\/span> 4-5<\/label>\n            <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".data-score-65,.data-score-72,.data-score-75,.data-score-78\"><span class=\"checkmark\"><\/span> 6-7<\/label>\n            <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".data-score-88,.data-score-91,.data-score-98,.data-score-99,.data-score-10\"><span class=\"checkmark\"><\/span> 8-10<\/label>\n         <\/div>\n      <\/div>\n\t\n\t <div class=\"aw-filters-tab\">\n        <input type=\"checkbox\" id=\"chck3\" class=\"faux-input\">\n        <label class=\"aw-filters-tab-label\" for=\"chck3\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-skull\"><\/i> <span class=\"hide-tablet\">NVD Risk<\/span> Rating<\/label>\n        <div class=\"aw-filters-tab-content\">\n            <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".rating-top-ten\"><span class=\"checkmark\"><\/span> Top Ten<\/label>\n          <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".rating-critical\"><span class=\"checkmark\"><\/span> Critical<\/label>\n          <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".rating-high\"><span class=\"checkmark\"><\/span> High<\/label>\n          <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".rating-medium\"><span class=\"checkmark\"><\/span> Medium<\/label>\n        <\/div>\n      <\/div>\n\t\n\t<div class=\"aw-filters-tab\">\n        <input type=\"checkbox\" id=\"chck4\" class=\"faux-input\">\n        <label class=\"aw-filters-tab-label\" for=\"chck4\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-user-check\"><\/i> Privileges<\/label>\n        <div class=\"aw-filters-tab-content\">\n            <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".priv-unauthenticated\"><span class=\"checkmark\"><\/span> Unauthenticated<\/label>\n            <label class=\"checkbox\"><input type=\"checkbox\" class=\"aw-filter-check\" onClick=\"aw_filter()\" awn-filter=\".priv-authenticated\"><span class=\"checkmark\"><\/span> Authenticated<\/label>          \n        <\/div>\n      <\/div>\n\t\n\t<div class=\"aw-filters-tab\">\n        <input type=\"checkbox\" id=\"chck5\" class=\"faux-input\">\n        <label class=\"aw-filters-tab-label\" for=\"chck5\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-code\"><\/i> Type<\/label>\n        <div class=\"aw-filters-tab-content\">\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".type-authentication-bypass\"><span class=\"checkmark\"><\/span> Authentication Bypass<\/label>\n\t\t\t<label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".type-information-disclosure\"><span class=\"checkmark\"><\/span> Information Disclosure<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".type-path-traversal\"><span class=\"checkmark\"><\/span> Path Traversal<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".type-privilege-escalation\"><span class=\"checkmark\"><\/span> Privilege Escalation<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".type-remote-code-execution\"><span class=\"checkmark\"><\/span> Remote Code Execution<\/label>\n            <label class=\"checkbox\"><input class=\"aw-filter-check\" type=\"checkbox\" onClick=\"aw_filter()\" awn-filter=\".type-security-feature-bypass\"><span class=\"checkmark\"><\/span> Security Feature Bypass<\/label>\n        <\/div>\n      <\/div>\n<\/div>\n\n  \n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30aaf536 elementor-widget elementor-widget-html\" data-id=\"30aaf536\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script>\n\nfunction scroll_to_top() {\n    document.querySelector(\"#aw_filter_reset_anchor\").scrollIntoView({\n        behavior: 'smooth'\n    });\n    jQuery(\".results-btn\").addClass(\"hide_this\");\n    jQuery(\".results-btn\").removeClass(\"show_this\");\n}\n\nfunction isScrolledIntoView(el) {\n    var rect = el.getBoundingClientRect();\n    var elemTop = rect.top;\n    var elemBottom = rect.bottom;\n\n    console.log(elemTop);\n\n    isVisible = false;\n    return isVisible;\n}\n\nfunction debounce(callback, wait) {\n  let timeout;\n  return (...args) => {\n      clearTimeout(timeout);\n      timeout = setTimeout(function () { callback.apply(this, args); }, wait);\n  };\n}\n\nfunction aw_filter_reset() {\n\tjQuery(\".aw-filter-check:checked\").prop('checked',false);\n\tmixerURL.filter('all').then(function(state) { results_button_popup(state.totalShow); });\n\tjQuery(\".aw-filters-reset\").removeClass(\"active\");\n\n    scroll_to_top();\n}\n\nfunction lozenge_filter(sFilter) {\n\n    if (sFilter == \"all\") {\n        aw_filter_reset();\n    }\n    else {\n    \n        jQuery(\"input[awn-filter='.\" + sFilter + \"']\").prop(\"checked\",true);\n        if (jQuery(\"input[awn-filter='.\" + sFilter + \"']\").closest(\".aw-filters-tab-content\").height() == 0) {\n            jQuery(\"input[awn-filter='.\" + sFilter + \"']\").closest(\".aw-filters-tab\").find('.aw-filters-tab-label').click();\n        }\n        aw_filter();\n    }\n}\n\nfunction aw_filter() {\n    filter_array = [];\n \n    jQuery(\".aw-filter-check:checked\").each(function(index) {\n   \t\tfilter_array.push(jQuery(this).attr(\"awn-filter\"));\n    });\n\n    if (filter_array.length > 0) {\n       mixerURL.filter(filter_array.join()).then(function(state) { results_button_popup(state.totalShow); });\n\t\tjQuery(\".aw-filters-reset\").addClass(\"active\");\n    }\n    else {\n        promise_wait = mixerURL.filter('all').then(function(state) { results_button_popup(state.totalShow); });\n    }\n}\n\nfunction results_button_popup (mixer_count) {\n    if (mixer_count == 0) {\n        jQuery(\".results-btn\").html(\"No results found - <a onClick='aw_filter_reset()'>Clear Filters<\/a>\ufe0f\");\n    }\n    else {\n        jQuery(\".results-btn\").html(\"<i aria-hidden='true' class='fas fa-arrow-up results-found-arrow'><\/i>\" + mixer_count + \" results found\ufe0f\");\n    }\n    \n    jQuery(\".results-btn\").addClass(\"show_this\");\n    jQuery(\".results-btn\").removeClass(\"hide_this\");\n}\n\nfunction view_change(elem) {\n    jQuery(\".radio-input\").removeClass(\"radio-active\");\n    jQuery(\"#\" + elem).addClass(\"radio-active\");\n\n    aw_filter();\n}\n\n<\/script>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-599fd82d elementor-widget elementor-widget-html\" data-id=\"599fd82d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-element elementor-element-a8f038a results-btn hide elementor-invisible elementor-widget elementor-widget-eael-creative-button elementor-sticky smoothScroll\" data-id=\"a8f038a\" data-element_type=\"widget\" data-settings=\"{&quot;sticky&quot;:&quot;bottom&quot;,&quot;sticky_offset&quot;:20,&quot;sticky_parent&quot;:&quot;yes&quot;,&quot;_animation&quot;:&quot;bounceInUp&quot;,&quot;sticky_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;,&quot;mobile&quot;],&quot;sticky_effects_offset&quot;:0}\" data-widget_type=\"eael-creative-button.default\" onClick=\"scroll_to_top()\">\n    <a class=\"eael-creative-button eael-creative-button--winona\" href=\"#vulnerability-results\">\n      View X Results\n      <\/a>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-1a05928a\" data-id=\"1a05928a\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3bba276 elementor-widget elementor-widget-html\" data-id=\"3bba276\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"aw-filters-reset aw-filters-reset-body-area aw-filters-placement_grid\" onclick=\"aw_filter_reset()\"><i aria-hidden=\"true\" class=\"fas fa-times\"><\/i> Clear filters<\/span>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-24f71af8 elementor-widget elementor-widget-html\" data-id=\"24f71af8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<style>\n\/* MISC *\/\n\n.aw_vuln_resources_accordion a {\n    transition: all .3s linear;\n}\n.aw_vuln_resources_accordion a:hover {\n    color: #000;\n}\n.aw-filters-reset {\n    color: #fff;\n    font-size: 13px;\n    font-weight: 300;\n    text-align: center;\n    display: block;\n    opacity: .0;\n\tfont-weight: 500;\n    letter-spacing: 0;\n    -webkit-transition: all .6s ease-in-out;\n    transition: all .6s ease-in-out;\n}\n.aw-filters-reset-body-area{color:#f1f1f1;font-size:105%;}\n.aw-filters-reset.active {\n    color: #fff;\n    opacity: 1.0;\n    cursor: pointer;height:auto;\n}\n.aw-filters-reset.active:hover {\n    color: #f58220;\n    opacity: 1.0;\n}\nspan.aw-filters-reset.aw-filters-reset-body-area.active:hover {\n    color: #f58220;\n}\n.aw-filters-reset.aw-filters-placement_grid.active {\n    color: #003051;\n}\n.aw-filters-reset.aw-filters-placement_grid {\n    margin-bottom: -25px;\n}\n     \n    .show_this {\n        display: block !important;\n    }\n    \n    .hide_this {\n        display: none !important;\n    }\n    \n    .no-results {\n        display: none;\n    }\n\n.gr-text {\n    background: -webkit-linear-gradient(45deg, #ff9832, #ff310f 100%);\n    -webkit-background-clip: text;\n    -webkit-text-fill-color: transparent;\n    -webkit-box-decoration-break: clone;\n}\n.gr-border-intro:before {\n    content: \"\";\n    position: absolute;\n    left: 0px;\n    top: 0;\n    height: 100%;\n    width: 2px;\n    background-image: linear-gradient(to bottom, #ee4b00, #f58220, transparent);\n    z-index: 39;\n}\n.gr-border-intro:after {\n    content: \"\";\n    position: absolute;\n    right: 0px;\n    top: 0;\n    height: 100%;\n    width: 2px;\n    background-image: linear-gradient(to bottom, #ee4b00, #f58220, transparent);\n    z-index: 39;\n}\nsection.demo-request-shapes:before {\n    position: absolute;\n    left: 50%;\n    top: 0;\n    margin-left: -320px;\n    width: 640px;\n    background: url('\/wp-content\/uploads\/2024\/01\/AW-MR-Vulns-Dark-BG-Shape-Top-240130.png');\n    height: 54px;\n    content: \" \";\n    background-size: cover;\n    z-index: 1\n}\nsection.demo-request-shapes:after {\n    position: absolute;\n    left: 50%;\n    bottom: 0px;\n    margin-left: -320px;\n    width: 640px;\n    background: url('\/wp-content\/uploads\/2024\/01\/AW-MR-Vulns-Dark-BG-Shape-Bottom-240130.png');\n    height: 54px;\n    content: \" \";\n    background-size: cover;\n        z-index: 1\n}\n.gr-border-intro .elementor-widget-wrap.elementor-element-populated {\n    border-image: linear-gradient(to right, #ef4900, #ff9933, #ef4900) 1;\n}\n\/* Data Table *\/\n.aw-vulns-graph_2023 {\n    color: #fff;\n}\n.w-100 {\n    width: 100%;\n}\n.text-start {\n    text-align: left;\n}\n.text-end {\n    text-align: right;\n}\n.aw-vulns-graph_2023 a {\n    color: #fff;\n    font-weight: bold;\n}\n.aw-vulns-graph_2023 a:hover {\n    color: #f58220;\n}\n.aw-vulns-graph_2023 table td:nth-child(2) {\n    width: 80%;\n    vertical-align: middle;\n}\n.rounded{border-radius: 6px;}\n.aw-table-header{text-transform: uppercase;font-size:12px;font-weight:bold;}\n.aw-total-row{border-top:1px solid #ffffff20;\n\n}\n.aw-table-source a{transition:all .3s;color:#fff;}\n.aw-table-source a:hover{color:#f58220;}\n\t.aw-table-source-spacer{padding-left:5px;padding-right:5px;}\n\/* end data table *\/\n\n\t\n\t\n\t\n\t\n\/* CRITICALITY NAV *\/\n\n.criticality-head{display:block;font-size:11px;font-weight:400;color:#000;}\n.aw-resources-dropdown ul {\n   list-style: inside;\n}\n.aw-resources-dropdown li a:hover {\n   text-decoration: underline;\n}\n#leadership-nav { \n   margin: 0 auto; \n   list-style: none; \n   position: relative;\n   width: auto; display:flex;justify-content: center;\n}\n#leadership-nav li { \n   display: inline-block;\t\n   margin-right: 40px;\n}\n#leadership-nav li:last-of-type {\n   margin-right: 0px;\n}\n#leadership-nav a { \n   color: #bbb; \n   font-size: 13px;\n   padding: 0px 0px 4px 0px;\n   text-decoration: none;\n   text-transform: uppercase;\n   cursor: pointer;\n}\n#leadership-nav a:hover { \n   color:  #000;\n}\n.leadership-nav-wrap.elementor-sticky--effects {\n   border-bottom: 5px solid #000;\n}\n\n\/*animated line hover or active*\/\n.leadership-nav-item a{position: relative;}\n.leadership-nav-item.active a,\n.leadership-nav-item a:hover\n{ \n   color:  #f58220 !important; \n}\n.leadership-nav-item a:after{\n   content: '' !important;\n   display: inline-block !important;\n   position: absolute !important;\n   left: -15px !important;\n   bottom: -15px !important;\n   height: 3px !important;\n   width: 0 !important;\n   background: linear-gradient(90deg, #fc4d0f, #f58220) !important;\n   transition: width 0.3s cubic-bezier(0.15, 0.56, 0.17, 0.94) !important;\n   border-radius: 5px;\n}\n.leadership-nav-item a:hover:after,\n.leadership-nav-item.active a:after\n{\n   width: calc(100% + 30px) !important;\n}\n\/*Critcality Nav end*\/\n\t\n\t\n\t\n\/*MODAL STYLES*\/\n\t\n.mfp-wrap {\n\twidth:100%;\n\tmax-width:800px;\n    margin: auto;\n    display: block;\n    left: calc(50% - 400px);\n}\nbody .eael-lightbox-popup-window.lightbox_type_custom_html .eael-lightbox-container{padding:5px;}\n.aw_vuln_resources_accordion span.eael-accordion-tab-title {\n    font-family: \"Encode Sans\", Sans-serif;\n    font-weight: 700;\n    font-size: 11px;\n    line-height: 20px;\n    letter-spacing: 3px;\n    text-transform: uppercase;\n    color: #000000;\n    display: block;\n}\n.eael-lightbox-popup-window button.mfp-close:not(.toggle) {\n    padding: 0px;\n    opacity: 1;\n    height: 40px;\n    width: 40px;\n    top: 8px;\n    right: 8px;\n    font-size: 40px;\n}\n.eael-lightbox-popup-window button.mfp-close:not(.toggle):hover{\n\tbackground: #ef4900;\n    transition: all .3s linear;\n\t}\n.aw_vuln_resources_accordion .fa-accordion-icon {\n    color: #f58220;\n}\n.aw_vuln_resources_accordion .eael-accordion-header {\n    padding: 15px;\n    border: 1px solid rgba(0,0,0,.02);\n    background-color: #f1f1f1;\n    font-size: 1rem;\n    font-weight: 600;\n    line-height: 1;\n    -webkit-transition: all .3s ease-in-out;\n    transition: all .3s ease-in-out;\n    display: -webkit-box;\n    display: -ms-flexbox;\n    display: flex;\n    -webkit-box-pack: justify;\n    -ms-flex-pack: justify;\n    justify-content: space-between;\n    -webkit-box-align: center;\n    -ms-flex-align: center;\n    align-items: center;\n    cursor: pointer;\n}\n.eael-advanced-accordion-icon-opened, .aw_vuln_resources_accordion i.fa-toggle.fas.fa-angle-right {\n    display: none;\n}\n.eael-advanced-accordion-icon-closed {\n    display: block;\n}\n\n.eael-adv-accordion .eael-accordion-list .eael-accordion-header>.eael-accordion-tab-title {\n    -webkit-box-flex: 1;\n    -ms-flex-positive: 1;\n    flex-grow: 1;\n    margin: 0;\n\tpadding-left: 20px;\n}\n.eael-adv-accordion .eael-accordion-list .eael-accordion-content {\n    display: none;\n    border: 1px solid #eee;\n    padding: 15px;\n    -webkit-box-sizing: border-box;\n    box-sizing: border-box;\n    font-size: 1rem;\n    line-height: 1.7;\n}\n.eael-adv-accordion .eael-accordion-list .eael-accordion-content ul li {\n    list-style-type: disc;\n    margin-left: 20px;\n}\n.eael-adv-accordion.aw_vuln_resources_accordion .eael-accordion-list .eael-accordion-header:hover,\n.eael-adv-accordion.aw_vuln_resources_accordion .eael-accordion-list .eael-accordion-header.active{\n    background-color: #003051;\n}\n.eael-adv-accordion.aw_vuln_resources_accordion .eael-accordion-list .eael-accordion-header:hover span.eael-accordion-tab-title,\n.eael-adv-accordion.aw_vuln_resources_accordion .eael-accordion-list .eael-accordion-header:hover .fa-toggle,\n.eael-adv-accordion.aw_vuln_resources_accordion .eael-accordion-list .eael-accordion-header.active span.eael-accordion-tab-title,\n.eael-adv-accordion.aw_vuln_resources_accordion .eael-accordion-list .eael-accordion-header.active .fa-toggle{\n    color: #fff;\n}\n.aw_vuln_resources_accordion .eael-accordion-list {\n    margin-bottom: 10px;\n}\np.aw-vuln-canvas-body-copy {\n    margin-bottom: 30px;\n    font-weight: 400;\n    font-size: 17px;\n    line-height: 27px;\n    color: #444444;\n}\nh6.aw-vuln-name-subhead {\n    font-weight: 700;\n    font-size: 11px;\n    line-height: 20px;\n    letter-spacing: 3px;\n    text-transform: uppercase;\n    color: #AAAAAA;\n    display: block;\n}\nh5.aw-vuln-canvas-title-subhead {\n    font-family: \"Encode Sans\", Sans-serif;\n    font-weight: 700;\n    font-size: 18px;\n    line-height: 22px;\n    color: #24618E;\n    margin: 0 0 8px 0px;\n}\nh3.aw-vuln-canvas-title {\n    font-weight: 700;\n    font-size: 36px;\n    line-height: 43px;\n    color: #FFFFFF;\n    margin-bottom: 5px;\n    width:90%;\n}\nh4.aw-vuln-canvas-title-description {\n    font-family: 'Lato';\n    font-style: normal;\n    font-weight: 400;\n    font-size: 20px;\n    line-height: 28px;\n    letter-spacing: 0.3px;\n    color: #FFFFFF;\n}\n.aw-vuln-item-content-info {\n    width: 100%;\n    display: flex;\n    margin-top: 30px;\n}\nbody.page-template-default .eael-offcanvas-content .eael-offcanvas-body {\n    padding-left: 0px;\n    padding-right: 0px;\n}\n.aw-vuln-canvas-content {\n\tposition: relative;\n\tmax-width: 600px;\n}\n.aw-vuln-canvas-content-main {\n    padding: 40px;\n}\n.aw-vuln-canvas-content-main {\n    padding: 48px 40px 40px 40px;\n    position: relative;\n}\n.aw-vuln-canvas-content-main:before {\n    content: \"\";\n    position: absolute;\n    left: 0;\n    top: 0;\n    right: 0;\n    height: 8px;\n    background: linear-gradient(90deg, #00acff 0%, #2197de 100%);\n}\n.aw-vuln-canvas-content-top {\n    background: url('https:\/\/arcticwolf.com\/wp-content\/uploads\/2023\/01\/AW-MR-Vuln-LP-BG-05-flipped-221123-1024x596.jpg');\n    background-size: cover;\n    background-position: bottom;\n    color: #fff;\n    padding: 40px; \n\tbackground-color: #0d091a;\n}\n.eael-offcanvas-content-open .eael-offcanvas-container:before {\n    position: absolute;\n    height: 100%;\n    width: 100%;\n    background: #00000050;\n    top: 0px;\n    left: 0px;\n    display: block;\n    content: \"\";\n    z-index: 2222;\n    backdrop-filter: blur(8px);\n    -webkit-backface-visibility: hidden;\n    -moz-backface-visibility: hidden;\n    backface-visibility: hidden;\n}\n.aw-vuln-col-score, .aw-vuln-col-rating, .aw-vuln-col-patch {\n    width: 33%;\n    max-width: 100%;\n    padding-left: 0;\n    text-decoration: none !important;\n}\n.aw-vuln-col-score span, .aw-vuln-col-rating span, .aw-vuln-col-patch span {\n    font-weight: 700;\n    font-size: 11px;\n    line-height: 20px;\n    letter-spacing: 3px;\n    text-transform: uppercase;\n    color: #AAAAAA;\n}\n.eael-lightbox-container .aw-vuln-col-score ul, .eael-lightbox-container .aw-vuln-col-rating ul, .eael-lightbox-container .aw-vuln-col-patch ul {\n    padding-left: 0px;\n}\n.eael-lightbox-container .aw-vuln-col-score ul li, .eael-lightbox-container .aw-vuln-col-rating ul li, .eael-lightbox-container .aw-vuln-col-patch ul li {\n    font-family: \"Encode Sans\", Sans-serif;\n    font-weight: 700;\n    font-size: 40px;\n    line-height: 48px;\n    letter-spacing: 0.4px;\n    color: #FFFFFF;\n}\n.eael-lightbox-container .aw-vuln-col-score ul li, .eael-lightbox-container .aw-vuln-col-rating ul li, .eael-lightbox-container .aw-vuln-col-patch ul li {\n    font-family: \"Encode Sans\", Sans-serif;\n    font-weight: 800;\n    font-size: 26px;\n    line-height: 26px;\n    color: #FFFFFF;\n}\na.aw-vuln-col-patch-link {\n    width: 100%;\n    font-family: 'Lato';\n    font-weight: 600;\n    font-size: 12px;\n    line-height: 18px;\n    color: #FFFFFF;\n    display: inline-flex;\n    width: auto;\n    cursor: pointer;\n    transition: all 0.3s ease;\n    align-items: center;\n    text-transform: uppercase;\n}\na.aw-vuln-col-patch-link img {\n    max-width: 18px;\n    margin-right: 10px;\n}\na.aw-vuln-col-patch-link:hover {\n    text-decoration: underline;\n}\n\/*end off canvas*\/\n\n\n.aw-vuln-display-flexer .elementor-widget-container {\n    display: flex;\n}\n.aw-vuln-article-grid_content {\n    overflow: hidden;\n}\n.aw-vuln-card-grid {\n    width: 100%;\n    background: #eee;\n    padding-bottom: 0.5rem;\n    min-height: 350px;\n    text-align: justify;\n    -webkit-flex-grow: 1;\n    -webkit-flex-flow: row wrap;\n    -webkit-justify-content: space-between;\n    -webkit-align-content: flex-start;\n    display: flex;\n    flex-grow: 1;\n    flex-flow: row wrap;\n    justify-content: space-between;\n    align-content: flex-start;\n}\n.aw-vuln-card-grid>* {\n    display: inline-block;\n    vertical-align: top;\n    text-align: left;\n}\n.aw-vuln-card-grid>.aw-vuln-card {\n    margin-bottom: 1rem;\n    width: 100%;\n    display: -webkit-inline-flex;\n    display: inline-flex;\n    -webkit-flex-direction: column;\n    flex-direction: column;\n}\n.aw-vuln-article-card {\n    border-radius: 3px 3px 2px 2px;\n    background: #fff;\n    cursor: pointer;\n    transition: background 550ms;\n    will-change: contents;\n}\n.aw-vuln-card-grid>.aw-vuln-card, .aw-vuln-card-grid_gap {\n    width: calc(25% - 0.75rem);\n\t\/* padding:20px; *\/\n\tpadding: 0;\n} \n.aw-vuln-article-card_content {\n    color: #333;\n    width: 100%;\n    -webkit-flex-grow: 1;\n    flex-grow: 1;\n}\n\/* .aw-vuln-article-card_footer{padding-top:35px;} *\/\n.aw-vuln-article-card_content {padding: 20px 20px 35px 20px;}\n.aw-vuln-article-card_footer{padding: 0 20px 20px 20px;}\n.aw-vuln-article-card_content time,\n.aw-vuln-article-card_content .vuln-name-subhead{\n    display: block;\n    margin-bottom: 0px;\n\ttext-transform: uppercase;\n}\na.aw-vuln-article-card_content.wrapper,\na.lozenge.lozenge__category{\n    color: #333;\n\ttransition: color 150ms;\n}\nh2.aw-vuln-card-title {\n    font-weight: 900;\n    font-size: 1.3rem;\n    line-height: 1.4em;\n    margin-bottom: 0.5em;\n    max-width: 40rem;\n}\ntime.time,\nspan.vuln-name-subhead{\n    font-size: 12px;\n    font-weight: 900;\n\tletter-spacing: 1px;\n}\n.lozenge, button.lozenge {\n    display: inline-block;\n    padding: 4px 0.7rem;\n    background: #f4f4f4;\n    border-radius: 999px;\n    font-size: .9rem;\n    font-weight: 400;\n    color: #333;\n    line-height: 1.2;\n    transition: background 150ms,color 150ms;\n    vertical-align: middle;\n    -webkit-font-feature-settings: 'lnum';\n    -moz-font-feature-settings: 'lnum';\n    font-feature-settings: 'lnum';\n    text-transform: none;\n    border: none !important;\n    letter-spacing: 0px;\n    font-weight: 700;\n    font-size: .8rem;\n}\n.lozenge__category, button.lozenge__category {\n    font-weight: 700;\n    font-size: .8rem;\n}\n.lozenge-list .lozenge {\n    margin: 0.5rem 0.5rem 0 0;\n    vertical-align: top;\n}\n\/*Criticality*\/\nh6.aw-criticality-score-wrap {\n    font-weight: 900;\n    font-family: 'Encode Sans', sans-serif;\n    color: #e4e4e4;\n\tposition: relative;\n}\n.rating-critical span.aw-criticality-score {\n    color: #ea3838;\n}\n.rating-high span.aw-criticality-score {\n    color: #ff8000;\n}\n.rating-medium span.aw-criticality-score {\n    color: #ffbc10;\n}\nh6.aw-criticality-score-wrap {\n    float: right;\n    margin-top: -10px;\n}\n.rating-top-ten h6.aw-criticality-score-wrap:after {\n    content: \"Top 10\";\n    display: block;\n    position: absolute;\n    right: 0px;\n    color: #333;\n    text-transform: uppercase;\n    font-size: 10px;\n    bottom: -25px;\n    border-top: 1px solid #ddd;\n\ttransition: all .2s linear;\n}\n\t\n\/*Card Hover States*\/\n.aw-vuln-article-card:hover {\n    background-color: #003051;\n    transition: all 450ms;\n\tcursor: pointer !important;\n}\n.aw-vuln-article-card:hover a.aw-vuln-article-card_content.wrapper {\n    color: #fff;\n}\n.aw-vuln-article-card:hover a.lozenge.lozenge__category,\n.aw-vuln-article-card:hover button.lozenge.lozenge__category {\n    background-color: rgba(255,255,255,.10);\n    color: #fff;\n}\n.aw-vuln-article-card:hover h6.aw-criticality-score-wrap {\n    color:#ffffff20;\n}\n.rating-top-ten.aw-vuln-article-card:hover h6.aw-criticality-score-wrap:after {\n    color: #fff;\n    border-top: 1px solid #ffffff20;\n}\n.aw-vuln-article-card:hover a.lozenge.lozenge__category:hover,\n.aw-vuln-article-card:hover button.lozenge.lozenge__category:hover{\n    background-color: #fff;\n    color: #003051;\n}\n\t\n\/*end hover states*\/\n\n\n  \/* No Results *\/\nsection.no-results {\n   text-align: center;\n   padding: 50px 25px;\n   border: 1px solid #d5d5d5;\n}\n.no-results .elementor-heading-title {\n   text-transform: uppercase;\n   font-size: 20px;\n   margin-bottom: 30px;\n}\nbutton.no-results-button {\n   background-color: #000;\n   border: none;\n}\nbutton.no-results-button:hover {\n   background-color: #1c1c1c;\n}\n.results-btn {\n    width: 100%;\n    max-width: 250px;\n    cursor: pointer;\n    z-index: 999999;\n    position: fixed;\n    bottom: 90px;\n    left: 50%;\n    margin-left: 75px;\n    text-align: center;\n    border-radius: 100px;\n    border: 1px solid #e1e1e1;\n    transition: transform .5s;\n    font-family: 'Lato', Arial, sans-serif;\n    display: inline-block;\n    padding: 19px 30px 19px 30px !important;\n    color: white;\n    border: 0 !important;\n    box-shadow: 0 2px 9px rgba(0,0,0,0.25);\n    background-color: #f58220;\n    background-image: linear-gradient(to right, #ff9933, #ef4900, #ef4900, #ff9933) !important;\n    background-size: 300% 100%;\n}\n.results-btn:hover{\n   transform:scale(1.06);\n\tbackground-position: 100% 0 !important;\n    box-shadow: 0 5px 18px rgb(0 0 0 \/ 30%);\n}\n.results-found-arrow {\n   margin-right: 10px;\n   font-size: 13px;\n   top: -1px;\n   position: relative;\n}\n.results-btn.hide {display:none;}\t \n\n\/* end no results styles *\/\n  \n  \n  \n    \n\/*SIDEBAR FILTER STYLES*\/\n\n\/* Accordion styles *\/\n.aw-filters-tabs {\n  overflow: hidden;\n}\n\n.aw-filters-tab {\n  width: 100%;\n  color: white;\n  overflow: hidden;\n  border-bottom:1px solid #ffffff;\n}\n.aw-filters-tab-label {\n    display: block;\n    \/* justify-content: center; *\/\n    padding: 1em;\n    font-weight: bold;\n    cursor: pointer;\n    text-transform: uppercase;\n    font-size: 12px;\n    font-weight: 400;\n    letter-spacing: 2px;\n}\n.aw-filters-tab-label:hover {\n}\n.aw-filters-tab-label::after {\n    content: \"\u276f\";\n    width: 1em;\n    height: 1em;\n    text-align: right;\n    transition: all 0.35s;\n    float: right;\n}\n.aw-filters-tab-content {\n  max-height: 0;\n  padding: 0 1em;\n  color: #ffffff;\n  transition: all 0.35s;\n}\n.aw-filters-tab .fa-accordion-icon {\n    margin-right: 10px;\n}\n\ninput.faux-input{position: absolute;\nopacity: 0;\nz-index: -1;}\ninput.faux-input:checked + .aw-filters-tab-label {\n  background: #00000022;\n}\ninput.faux-input:checked + .aw-filters-tab-label::after {\n  transform: rotate(90deg);\n}\ninput.faux-input:checked ~ .aw-filters-tab-content {\n  max-height: 100vh;\n  padding: 1em;\n}\n\n \/* The radio btn *\/\n .radio-input { \n position: absolute;\n visibility: hidden;\n}\n\n.radio-label {\n cursor: pointer;\n display: block;  \n height: 1.625rem;\n line-height: 1.625rem;\n margin-right: 1rem;\n margin-bottom:10px;\n position: relative;\n vertical-align: top;\n color:#fff;\n \n}\n\n.radio-label:before {\n background-color: #eeeeee;\n border-radius: .8rem;\n content: \"\";  \n display: inline-block;\n height: 1.6rem;\n margin-right: .4rem;\n width: 1.6rem;  \n vertical-align: top;\n}  \n.radio-label:hover:before {\n background-color: #cccccc;\n border: .1rem solid #aaa;\n border-radius: .8rem;\n content: \"\";  \n display: inline-block;\n height: 1.6rem;\n margin-right: .4rem;\n width: 1.6rem;  \n vertical-align: top;\n} \ninput[type=radio]:checked + label:before{background-color:#f58220;background: -webkit-linear-gradient(45deg, #ff9832, #ff310f 100%);}\n\ninput[type=radio]:checked + label:after {\n    background: #fff;\n    border-radius: 0.5rem;\n    content: '';\n    height: 0.7rem;\n    left: 0.45rem;\n    position: absolute;\n    top: 0.45rem;\n    width: 0.7rem;\n}\n \n  \/* The checkbox *\/\n.checkbox {\n display: block;\n position: relative;\n padding-left: 35px;\n margin-bottom: 10px;\n margin-top: 5px;\n cursor: pointer;\n -webkit-user-select: none;\n -moz-user-select: none;\n -ms-user-select: none;\n user-select: none;color:#fff;\n}\n\n\/* Hide the browser's default checkbox *\/\n.checkbox input {\n position: absolute;\n opacity: 0;\n cursor: pointer;\n height: 0;\n width: 0;\n}\n\n\/* Create a custom checkbox *\/\n.checkmark {\n position: absolute;\n top: 0;\n left: 0;\n height: 25px;\n width: 25px;\n background-color: #eee;\n}\n\n\/* On mouse-over, add a grey background color *\/\n.checkbox:hover input ~ .checkmark {\n background-color: #cccccc;\n}\n\n\/* When the checkbox is checked, add a blue background *\/\n.checkbox input:checked ~ .checkmark {\n    background-color: #f58220;\n    background: -webkit-linear-gradient(45deg, #ff9832, #ff310f 100%);\n}\n\n\/* Create the checkmark\/indicator (hidden when not checked) *\/\n.checkmark:after {\n content: \"\";\n position: absolute;\n display: none;\n}\n\n\/* Show the checkmark when checked *\/\n.checkbox input:checked ~ .checkmark:after {\n display: block;\n}\n\n\/* Style the checkmark\/indicator *\/\n.checkbox .checkmark:after {\n left: 10px;\n top: 7px;\n width: 5px;\n height: 10px;\n border: solid white;\n border-width: 0 3px 3px 0;\n -webkit-transform: rotate(45deg);\n -ms-transform: rotate(45deg);\n transform: rotate(45deg);\n}\n.blog-box-title{margin:auto;}\n\/*END OFF CANVAS STYLES *\/\n\n\n\/* @MEDIA QUERIES *\/\n\n@media (min-width:1025px){\n    \t.boxes-pull-right{\n    position: relative; right:-10%;}\n}\n@media (max-width:1500px){\n\t.aw-vuln-card-grid>.aw-vuln-card, .aw-vuln-card-grid_gap {width: calc(33% - 0.75rem);}\n\t.hide-tablet{display: none;}\n}\n@media (max-width:1167px){\n\t.aw-vuln-card-grid>.aw-vuln-card, .aw-vuln-card-grid_gap {width: calc(50% - 0.75rem);}\n}\n @media (max-width:1024px){\n.results-btn {\n    bottom: 35px;\n    max-width: 210px;\n    left: 50%;\n    border-radius: 5px;\n    line-height: 18px;\n    padding: 15px 10px;\n    margin-left: initial;\n}\n.aw-table-source a{display:block;}\n.aw-table-source-spacer{display: none;}\n}\n@media (max-width:860px){\n\t.aw-vuln-card-grid>.aw-vuln-card, .aw-vuln-card-grid_gap {width: calc(100% - 0.75rem);}\n}\n\t\n\t\n@media (max-width:767px){\n\t\tsection.demo-request-shapes:before,\n\t\tsection.demo-request-shapes:after {display: none;}\n\t\t.filters-navy-mobile{background-color: #003051;}\n\t\t.aw-vuln-item-content-info {display: block;}\n\t\t.aw-vuln-col-score,\n\t\t.aw-vuln-col-rating,\n\t\t.aw-vuln-col-patch {width: 100%;text-align: center;}\n\t\t.aw-vuln-col-rating {\n              border-top: 1px solid #ffffff;\n              margin-top: 10px;\n              padding-top: 10px;\n              margin-bottom: 10px;\n              padding-bottom: 10px;\n              border-bottom: 1px solid #ffffff;\n          }\n\t\th3.aw-vuln-canvas-title {font-size: 28px;line-height: 36px;}\n\t\th4.aw-vuln-canvas-title-description{font-size: 18px;}\n\t\t.aw-vuln-canvas-content-main {padding: 40px 20px 20px 20px;}\n\t\t.mfp-zoom-in.mfp-ready .eael-lightbox-popup-window{padding-top:50px;padding-bottom:50px;}\n\t\t.eael-lightbox-popup-window button.mfp-close:not(.toggle){top:58px;}\n\t.results-btn{margin-left:-105px;}\n\t.mfp-wrap {left: inherit;}\n\t.eael-lightbox-popup-window{max-width:98%;}\n}\n\n\n@media (max-width:639px){\n#leadership-nav a{font-size:12px;}\n#leadership-nav li {margin-right: 20px;}\n.eael-lightbox-popup-window{max-width:98%;}\n.aw-filters-tab-content{overflow: hidden;}\n.aw-filters-reset{opacity: .2;margin-bottom:-15px;}\n.aw-vuln-canvas-content-top{padding-left:15px;padding-right:15px;\n}\n.aw-filters-reset.aw-filters-placement_grid{color:#003051;}\n}\n@media (max-width:400px){\n\n#leadership-nav a{font-size:11px;}\n#leadership-nav li {margin-right: 10px;}\n    }\n\n.aw-vuln-canvas-content-main {\n    background: white;\n}\n    \n<\/style>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e9d7cd0 elementor-widget elementor-widget-eael-lightbox\" data-id=\"6e9d7cd0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"eael-lightbox.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\n\t\t<div data-lightbox-type=\"lightbox_type_custom_html\" data-lightbox-type-url=\"\" data-lightbox-trigger-pageload=\"1\" class=\"eael-lightbox-wrapper\" data-trigger=\"eael_lightbox_trigger_external\" data-lightbox-id=\"lightbox_6a8349bfb5f40\" data-type=\"inline\" data-src=\"#eael-lightbox-window-6a8349bfb5f40\" data-popup-layout=\"eael-lightbox-popup-fullscreen\" data-main-class=\"eael-lightbox-modal-popup-6e9d7cd0\" data-close_button=\"yes\" data-esc_exit=\"yes\" data-click_exit=\"yes\" data-effect=\"animated mfp-zoom-in\" data-trigger-element=\".open-popup\">\n\t\t\t<div class=\"eael-lightbox-btn\">\n\t\t\t\t\t\t\t<\/div><!-- close .eael-lightbox-btn -->\n\t\t<\/div>\n\n\t\t<div class=\"eael-lightbox-popup-window eael-lightbox-popup-window-6e9d7cd0 lightbox_type_custom_html\" id=\"eael-lightbox-window-6a8349bfb5f40\">\n\t\t\t<div class=\"eael-lightbox-container\">\n\t\t\t\tMODAL HTML\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-60af09b1 aw-vuln-display-flexer elementor-widget elementor-widget-html\" data-id=\"60af09b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"aw-vuln-article-grid_content aw-vuln-card-grid\"><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-progress rating-critical priv-unauthenticated type-privilege-escalation  rating-top-ten data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(1)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-34362<\/h2><p>\"The MOVEit Transfer vulnerability\" - Exploited by the Cl0p ransomware group. Several high profile companies were listed on their leak site. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-progress');\">Progress<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_1\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-34362<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">\"The MOVEit Transfer vulnerability\" - Exploited by the Cl0p ransomware group. Several high profile companies were listed on their leak site. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/community.progress.com\/s\/article\/MOVEit-Transfer-Critical-Vulnerability-31May2023 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-34362 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical zero-day privilege escalation vulnerability disclosed in May 2023 within MOVEit Transfer, a managed file transfer (MFT). The exploitation of this vulnerability could lead to escalated privileges and potential unauthorised access to an environment. The Cl0p ransomware group exploited this vulnerability to steal information from over 2,000 companies, including several high profile entites. In these attacks, Cl0p aimed to extract information and then coerced the targeted organisations into contacting them for ransom payment, threatening to expose their data if the payment was not made.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-11\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"11\" aria-controls=\"elementor-tab-content-20211\" onclick=\"accordion_toggle('elementor-tab-content-20211 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20211\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-11\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-34362-moveit-transfer-sql-injection-vulnerability-actively-exploited-in-the-wild\/\" target=\"_blank\">CVE-2023-34362 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-citrix rating-high priv-unauthenticated type-information-disclosure  rating-top-ten data-score-75\" data-score=\"7.5\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(2)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">7.5<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-4966<\/h2><p>\"Citrix bleed\" - Exploited by LockBit 3.0 affiliates and nation-state threat actors. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-information-disclosure')\">Information Disclosure<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-high');\">High<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-citrix');\">Citrix<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_2\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-4966<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">\"Citrix bleed\" - Exploited by LockBit 3.0 affiliates and nation-state threat actors. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">7.5<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">High<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/support.citrix.com\/article\/CTX579459\/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-4966 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">An information disclosure vulnerability in Citrix NetScaler ADC and Netscaler Gateway that was exploited by nation-state threat actors and LockBit 3.0 affiliates. The vulnerability, dubbed \"Citrix Bleed\", allows an unauthenticated remote threat actor to access memory outside the intended buffer boundaries when certain operations are performed on a memory buffer. LockBit 3.0 affiliates leveraged Citrix Bleed to target Boeing and Industrial and Commerical Bank of China (ICBC) in late 2023. Although NIST NVD rated this vulnerability as a high severity, Citrix labeled this as a critical vulnerability at a CVSS of 9.4.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-12\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"12\" aria-controls=\"elementor-tab-content-20212\" onclick=\"accordion_toggle('elementor-tab-content-20212 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20212\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-12\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-4966-critical-data-exposure-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler-gateway\/\" target=\"_blank\">CVE-2023-4966 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-cisco rating-critical priv-unauthenticated type-privilege-escalation  rating-top-ten data-score-10\" data-score=\"10\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(3)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">10<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-20198<\/h2><p>A maximum severity privilege escalation vulnerability. Over 40,000 Cisco Devices were discovered to be compromised.  <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-cisco');\">Cisco<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_3\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-20198<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">A maximum severity privilege escalation vulnerability. Over 40,000 Cisco Devices were discovered to be compromised.  <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">10<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxe-webui-privesc-j22SaA4z \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-20198 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">In October 2023, Cisco disclosed an actively exploited critical privilege escalation vulnerability in the Web UI feature of the Cisco IOS XE operating system. The vulnerability could allow a remote, unauthenticated threat actor to create an account with maximum privileges (privilege level 15 access) on the affected device. At the time, this vulnerability did not have an official patch and Cisco provided workarounds as a temporary fix to prevent exploitation. A total of over 40,000 Cisco devices running the IOS XE operating system fell victim to compromise. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-13\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"13\" aria-controls=\"elementor-tab-content-20213\" onclick=\"accordion_toggle('elementor-tab-content-20213 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20213\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-13\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-20198\/\" target=\"_blank\">CVE-2023-20198 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-atlassian rating-critical priv-unauthenticated type-privilege-escalation  rating-top-ten data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(4)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-22518<\/h2><p>A critical improper authorisation vulnerability that was used to deploy Cerber ransomware. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-atlassian');\">Atlassian<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_4\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-22518<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">A critical improper authorisation vulnerability that was used to deploy Cerber ransomware. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/confluence.atlassian.com\/security\/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-22518 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical improper authorisation vulnerability that allows a remote unauthenticated threat actor to reset confluence and create a Confluence instance administrator account. At the time, however, Atlassian stated that this vulnerability could only cause data loss and threat actors could not exfiltrate data. Subsequently, in November 2023, this vulnerability was observed being exploited in the wild to deploy Cerber ransomware and Atlassian updated the vulnerability's details. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-14\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"14\" aria-controls=\"elementor-tab-content-20214\" onclick=\"accordion_toggle('elementor-tab-content-20214 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20214\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-14\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-22523-cve-2022-1471-cve-2023-22524-cve-2023-22522\/\" target=\"_blank\">CVE-2023-22518 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-barracuda-networks rating-critical priv-unauthenticated type-remote-code-execution  rating-top-ten data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(5)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-2868<\/h2><p>Replace your compromised ESG appliances - UNC4841 exploited this vulnerability to perform espionage. Initial patches by Barracuda were ineffective. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-barracuda-networks');\">Barracuda Networks<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_5\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-2868<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Replace your compromised ESG appliances - UNC4841 exploited this vulnerability to perform espionage. Initial patches by Barracuda were ineffective. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/www.barracuda.com\/company\/legal\/esg-vulnerability \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-2868 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical remote code execution (RCE) vulnerability in Barracuda ESG appliances. Barracuda ESG is an email security gateway that manages and filters inbound\/outbound traffic within an organisation's network. This vulnerability existed in the module that initially screens the attachments of incoming emails, and was exploited by the China-nexus threat actor UNC4841 for espionage. Originally when Barracuda published their advisory, they stated that all affected appliances receved a patch. However shortly after, it was determined the patch was ineffective and impacted customers had to replace their ESG appliances. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-15\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"15\" aria-controls=\"elementor-tab-content-20215\" onclick=\"accordion_toggle('elementor-tab-content-20215 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20215\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-15\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-2868\/\" target=\"_blank\">CVE-2023-2868 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-cisco rating-critical  priv-unauthenticated type-information-disclosure  rating-top-ten data-score-91\" data-score=\"9.1\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(6)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.1<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-20269<\/h2><p>Information disclosure vulnerability exploited by the LockBit and Akira ransomware groups to target organisations across a variety of industries. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-information-disclosure')\">Information Disclosure<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical ');\">Critical <\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-cisco');\">Cisco<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_6\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-20269<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Information disclosure vulnerability exploited by the LockBit and Akira ransomware groups to target organisations across a variety of industries. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.1<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical <\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-asaftd-ravpn-auth-8LyfCkeC \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-20269 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">In September 2023, Cisco revealed a zero-day vulnerability in the remote access VPN feature of Cisco ASA and Cisco Firepower Threat Defense (FTD) Software. This vulnerability enables threat actors to make unlimited attempts with username\/password combinations, attributed to the inadequate separation of authentication, authorisation, and accounting (AAA). The Akira and LockBit ransomware groups widely exploited this vulnerability to target organisations across a variety of industries. Shortly before this vulnerability was officially disclosed, Arctic Wolf observed an Akira ransomware campaign targeting Cisco ASA VPN appliances (https:\/\/arcticwolf.com\/resources\/blog\/ongoing-ransomware-campaign-against-cisco-asa-vpn-appliances\/). Although this vulnerability is rated as a critical severity by NIST NVD, Cisco labeled it as a medium severity vulnerability with a CVSS score of 5.0. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-16\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"16\" aria-controls=\"elementor-tab-content-20216\" onclick=\"accordion_toggle('elementor-tab-content-20216 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20216\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-16\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-20269\/\" target=\"_blank\">CVE-2023-20269 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-papercut rating-critical priv-unauthenticated type-authentication-bypass  rating-top-ten data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(7)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-27350<\/h2><p>Bl00dy - This vulnerability was exploited by Bl00dy, Cl0p and Lockbit.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-authentication-bypass')\">Authentication Bypass<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-papercut');\">PaperCut<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_7\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-27350<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Bl00dy - This vulnerability was exploited by Bl00dy, Cl0p and Lockbit.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/www.papercut.com\/kb\/Main\/PO-1216-and-PO-1219 https:\/\/www.cisa.gov\/news-events\/cybersecurity-advisories\/aa23-131a https:\/\/www.rapid7.com\/blog\/post\/2023\/05\/17\/etr-cve-2023-27350-ongoing-exploitation-of-papercut-remote-code-execution-vulnerability\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-27350 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">In April 2023, Papercut disclosed that threat actors are exploiting CVE-2023-27350 to target print management servers. The vulnerability allows unauthenticated threat actors to bypass authentication and execute arbritrary code in the context of SYSTEM on a PaperCut Application Server. This vulnerability was exploited by a variety of threat actors including ransomware groups such as Bl00dy, Cl0p and Lockbit.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-17\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"17\" aria-controls=\"elementor-tab-content-20217\" onclick=\"accordion_toggle('elementor-tab-content-20217 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20217\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-17\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-27350\/\" target=\"_blank\">CVE-2023-27350 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-atlassian rating-critical priv-unauthenticated type-privilege-escalation  rating-top-ten data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(8)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-22515<\/h2><p>Broken access control flaw that allowed threat actors to become Confluence administrators. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-atlassian');\">Atlassian<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_8\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-22515<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Broken access control flaw that allowed threat actors to become Confluence administrators. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/confluence.atlassian.com\/security\/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-22515 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical vulnerability arose from a broken access control flaw in Confluence Data Center and Server. This flaw enabled threat actors to gain initial access to Confluence instances by creating unauthorised Confluence administrator accounts. Atlassian had first became aware of this vulnerability when multiple customers reported the malicious activity. Additionally Atlassian, confirmed that a known nation-state actor had exploited the vulnerability. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-18\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"18\" aria-controls=\"elementor-tab-content-20218\" onclick=\"accordion_toggle('elementor-tab-content-20218 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20218\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-18\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-22515-critical-privilege-escalation-vulnerability-in-confluence-data-center-and-server\/\" target=\"_blank\">CVE-2023-22515 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-apache rating-critical priv-unauthenticated type-remote-code-execution  rating-top-ten data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(9)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-46604<\/h2><p>Remote code execution vulnerability observed by Arctic Wolf in association with a ransomware campaign delivering a TellyouThePass variant.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-apache');\">Apache<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_9\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-46604<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability observed by Arctic Wolf in association with a ransomware campaign delivering a TellyouThePass variant.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/activemq.apache.org\/security-advisories.data\/CVE-2023-46604\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-46604 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical remote code execution (RCE) vulnerability that was observed by several vendors including Arctic Wolf being exploited in the wild shortly after the vulnerability's disclosure in late 2023. Arctic Wolf had observed several instances of active exploitation in association with a ransomware campaign delivering the TellYouThePass ransomware variant (https:\/\/arcticwolf.com\/resources\/blog\/tellmethetruth-exploitation-of-cve-2023-46604-leading-to-ransomware\/). At the time, over 3000 servers that were accessible externally were found to be running a vulnerable version of ActiveMQ (per shodan search). <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-19\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"19\" aria-controls=\"elementor-tab-content-20219\" onclick=\"accordion_toggle('elementor-tab-content-20219 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-20219\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-19\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-46604-critical-rce-vulnerability-in-apache-activemq\/\" target=\"_blank\">CVE-2023-46604 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-microsoft rating-high priv-unauthenticated type-remote-code-execution  rating-top-ten data-score-88\" data-score=\"8.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(10)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">8.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-36884<\/h2><p>Remote code execution vulnerability exploited by Storm-0978. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-high');\">High<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-microsoft');\">Microsoft<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_10\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-36884<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability exploited by Storm-0978. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">8.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">High<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2023-36884\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-36884 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A high severity remote code execution affecting Windows and Microsoft Office that was first disclosed by Microsoft in their July Patch Tuesday update. To exploit CVE-2023-36884, a threat actor would have to send a specially crafted file to a victim and convince them to take some sort of action. This vulnerability was used in a phishing campaign by Russian-nexus threat actor Storm-0978 to target defence and government entitites in Europe and North America using lures related to the Ukranian World Congress. At the time of it's disclosure, this vulnerability did not have an official patch and Microsoft fixed the vulnerability the following month. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-110\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"110\" aria-controls=\"elementor-tab-content-202110\" onclick=\"accordion_toggle('elementor-tab-content-202110 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202110\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-110\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/multiple-critical-actively-exploited-vulnerabilities-patched-in-microsofts-july-2023-patch-tuesday\/\" target=\"_blank\">CVE-2023-36884 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-citrix rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(11)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-3519<\/h2><p>Remote code execution vulnerability used to target a critical infrastructure entity and install a webshell.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-citrix');\">Citrix<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_11\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-3519<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability used to target a critical infrastructure entity and install a webshell.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/support.citrix.com\/article\/CTX561482\/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-3519 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">In July 2023, Citrix disclosed an actively exploited critical remote code execution (RCE) vulnerability in Citrix NetScaler ADC and NetScaler Gateway. The previous month, threat actors leveraged this zero-day vulnerability to install a webshell on the NetScaler ADC appliance of a critical infrastructure entity, which enabled the threat actors to exfiltrate Active Directory (AD) data.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-111\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"111\" aria-controls=\"elementor-tab-content-202111\" onclick=\"accordion_toggle('elementor-tab-content-202111 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202111\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-111\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-3519-2\/\" target=\"_blank\">CVE-2023-3519 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-jetbrains rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(12)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-42793<\/h2><p>Russian Foreign Intelligence Service (SVR) affiliated threat actors targeted servers to exploit this vulnerability. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-jetbrains');\">JetBrains<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_12\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-42793<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Russian Foreign Intelligence Service (SVR) affiliated threat actors targeted servers to exploit this vulnerability. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/blog.jetbrains.com\/teamcity\/2023\/09\/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now\/ \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-42793 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical vulnerability in JetBrains TeamCity that allows an unauthenticated attacker with HTTP(S) access to a TeamCity server to perform remote code execution (RCE). TeamCity is a continuous integration\/continuous deployment (CI\/CD) software platform for automating and managing the development of software. Since September 2023, threat actors affiliated to the Russian Foreign Intelligence Service (SVR) have been targeting servers hosting JetBrains TeamCity software. This allowed the threat actors to bypass authorisation and conduct RCE. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-112\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"112\" aria-controls=\"elementor-tab-content-202112\" onclick=\"accordion_toggle('elementor-tab-content-202112 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202112\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-112\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-42793\/\" target=\"_blank\">CVE-2023-42793 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-zyxel rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(13)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-28771<\/h2><p>Used to build several Distributed Denial of Service (DDoS) botnets. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-zyxel');\">Zyxel<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_13\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-28771<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Used to build several Distributed Denial of Service (DDoS) botnets. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/www.zyxel.com\/global\/en\/support\/security-advisories\/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-28771 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical remote code execution (RCE) affecting multiple Zyxel firewalls. Remote unauthenticated threat actors can achieve RCE by sending specially crafted packets to a vulnerable device. Throughout the middle of 2023, there was widespread exploitation globally of this vulnerability to build several Distributed Denial of Service (DDoS) botnets. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-113\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"113\" aria-controls=\"elementor-tab-content-202113\" onclick=\"accordion_toggle('elementor-tab-content-202113 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202113\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-113\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-33009-and-cve-2023-33010\/\" target=\"_blank\">CVE-2023-28771 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-microsoft rating-medium priv-unauthenticated type-security-feature-bypass   data-score-44\" data-score=\"4.4\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(14)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">4.4<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-24880<\/h2><p>Security feature bypass that allowed 100,000 downloads of malicious MSI files to deliver Magniber ransomware without any security warnings. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-security-feature-bypass')\">Security Feature bypass<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-medium');\">Medium<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-microsoft');\">Microsoft<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_14\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-24880<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Security feature bypass that allowed 100,000 downloads of malicious MSI files to deliver Magniber ransomware without any security warnings. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">4.4<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Medium<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-24880\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-24880 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A medium severity security feature bypass vulnerability that was disclosed and patched by Microsoft in their March Patch Tuesday update. A threat actor could successfully exploit this vulnerability and evade Mark of the Web (MotW) tagging defences by leveraging a specially crafted malicious file. Since January 2023, Google Threat Analysis Group (TAG) observed over 100,000 downloads of malicious  MSI files to deliver Magniber ransomware without any security warnings. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-114\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"114\" aria-controls=\"elementor-tab-content-202114\" onclick=\"accordion_toggle('elementor-tab-content-202114 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202114\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-114\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/multiple-critical-actively-exploited-vulnerabilities-patched-in-microsofts-march-security-update\/\" target=\"_blank\">CVE-2023-24880 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-f5 rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(15)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-46747<\/h2><p>Critical remote code execution vulnerability that was observed chained with CVE-2023-46748<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-f5');\">F5<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_15\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-46747<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Critical remote code execution vulnerability that was observed chained with CVE-2023-46748<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/my.f5.com\/manage\/s\/article\/K000137353\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-46747 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical remote code execution (RCE) vulnerability in F5's BIG-IP Traffic Management User Interface.  If successfully exploited, a threat actor with network access to the vulnerable system could bypass the configuration utility authentication and execute arbitrary system commands. F5 observed the exploitation of this vulnerability chained with CVE-2023-46748 among their customers. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-115\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"115\" aria-controls=\"elementor-tab-content-202115\" onclick=\"accordion_toggle('elementor-tab-content-202115 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202115\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-115\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-46747\/\" target=\"_blank\">CVE-2023-46747 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-progress rating-critical priv-authenticated type-remote-code-execution   data-score-10\" data-score=\"10\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(16)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">10<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-40044<\/h2><p>Deserialisation vulnerability that allows a threat actor to obtain remote code execution.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-authenticated')\">Authenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-progress');\">Progress<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_16\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-40044<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Deserialisation vulnerability that allows a threat actor to obtain remote code execution.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">10<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/community.progress.com\/s\/article\/WS-FTP-Server-Critical-Vulnerability-September-2023 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-40044 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A maximum severity deserialisation vulnerability that affects the Ad Hoc Transfer module within Progress WS_FTP Server, which allows a threat actor to obtain remote code execution (RCE). In late 2023, several vendors reported exploitation of this vulnerability observed in the wild.  <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-116\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"116\" aria-controls=\"elementor-tab-content-202116\" onclick=\"accordion_toggle('elementor-tab-content-202116 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202116\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-116\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-40044-cve-2023-42657\/\" target=\"_blank\">CVE-2023-40044 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-adobe rating-critical  priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(17)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-26360<\/h2><p>Remote code execution vulnerability used to compromise at least two servers belonging to a US government agency.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical ');\">Critical <\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-adobe');\">Adobe<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_17\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-26360<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability used to compromise at least two servers belonging to a US government agency.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical <\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/helpx.adobe.com\/security\/products\/coldfusion\/apsb23-25.html\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-26360 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A threat actor can exploit this high severity remote deserialisation of untrusted data flaw to achieve remote code execution (RCE). This vulnerability was disclosed by Adobe in April 2023 and stated that exploitation of this vulnerability has been observed in the wild. Subsequently between June and July 2023 this vulnerability was exploited to compromise at least two public-facing servers belonging to a Federal Civilian Executive Branch (FCEB) agency. Although NIST NVD rated this vulnerability as critical, the vendor rated it as a high severity vulnerability. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-117\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"117\" aria-controls=\"elementor-tab-content-202117\" onclick=\"accordion_toggle('elementor-tab-content-202117 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202117\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-117\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-26360\/\" target=\"_blank\">CVE-2023-26360 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-cisco rating-high priv-authenticated type-privilege-escalation   data-score-72\" data-score=\"7.2\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(18)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">7.2<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-20273<\/h2><p>Chained with CVE-2023-20198. Used after initial access to elevate privileges. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-authenticated')\">Authenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-high');\">High<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-cisco');\">Cisco<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_18\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-20273<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Chained with CVE-2023-20198. Used after initial access to elevate privileges. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">7.2<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">High<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxe-webui-privesc-j22SaA4z\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-20273 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A privilege escalation vulnerability that is chained with the critical vulnerability CVE-2023-20198. In Cisco's observed exploitation, this vulnerability was used after initial access to leverage the new local user to elevate priviliges to root. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-118\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"118\" aria-controls=\"elementor-tab-content-202118\" onclick=\"accordion_toggle('elementor-tab-content-202118 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202118\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-118\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-20198\/\" target=\"_blank\">CVE-2023-20273 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-fortinet rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(19)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-27997<\/h2><p>Remote code execution vulnerability through heap-based buffer overflow.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-fortinet');\">Fortinet<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_19\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-27997<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability through heap-based buffer overflow.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/olympecyberdefense.fr\/1193-2\/ \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-27997 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical remote code execution (RCE) vulnerability in Forti OS and FortiProxy SSL-VPN disclosed in June 2023 that Fortinet observed being exploited in several instances. This vulnerability allows a threat actor to achieve RCE through a heap-based buffer overflow. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-119\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"119\" aria-controls=\"elementor-tab-content-202119\" onclick=\"accordion_toggle('elementor-tab-content-202119 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202119\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-119\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-27997\/\" target=\"_blank\">CVE-2023-27997 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-qlik rating-critical priv-authenticated type-privilege-escalation   data-score-99\" data-score=\"9.9\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(20)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.9<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-41265<\/h2><p>HTTP tunneling vulnerability that leads to privilege esclation. Arctic Wolf observed this vulnerability exploited in a Cactus ransomware campaign.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-authenticated')\">Authenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-qlik');\">Qlik<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_20\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-41265<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">HTTP tunneling vulnerability that leads to privilege esclation. Arctic Wolf observed this vulnerability exploited in a Cactus ransomware campaign.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.9<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/community.qlik.com\/t5\/Official-Support-Articles\/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows\/ta-p\/2110801 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-41265 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">An HTTP tunnelling vulnerability due to improper validation of HTTP headers in Qlik Sense, a cloud analytics and business intelligence platform. If successfully exploited, a threat actor could elevate their privileges and execute HTTP requests on the backend server hosting the software. Arctic Wolf observed this vulnerabiltiy being exploited in a Cactus ransomware campaign in November 2023 among several customers. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-120\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"120\" aria-controls=\"elementor-tab-content-202120\" onclick=\"accordion_toggle('elementor-tab-content-202120 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202120\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-120\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-41265-cve-2023-41266-cve-2023-48365\/\" target=\"_blank\">CVE-2023-41265 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-microsoft rating-critical priv-unauthenticated type-privilege-escalation   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(21)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-23397<\/h2><p>Privilege escalation vulnerability leveraged by Forest Blizzard to provide unauthorised access to email accounts within exchange servers. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-microsoft');\">Microsoft<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_21\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-23397<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Privilege escalation vulnerability leveraged by Forest Blizzard to provide unauthorised access to email accounts within exchange servers. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-23397 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-23397 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical privilege escalation vulnerability impacting Microsoft Outlook. A threat actor can successfully exploit this vulnerability and escalate privileges without user interaction by sending specially crafted emails that will trigger automatically when they are retrieved and processed by an Outlook client. Microsoft observed the Russian-nexus threat actor Forest Blizzard exploit this vulnerability to provide unauthorised access to email accounts within exchange servers. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-121\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"121\" aria-controls=\"elementor-tab-content-202121\" onclick=\"accordion_toggle('elementor-tab-content-202121 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202121\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-121\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/multiple-critical-actively-exploited-vulnerabilities-patched-in-microsofts-march-security-update\/\" target=\"_blank\">CVE-2023-23397 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-sysaid rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(22)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-47246<\/h2><p>Remote code execution vulnerability exploited by Lace Tempest<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-sysaid');\">SysAid<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_22\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-47246<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability exploited by Lace Tempest<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/www.sysaid.com\/blog\/service-desk\/on-premise-software-security-vulnerability-notification%22%EF%B7%9FHYPERLINK%20%22https:\/www.sysaid.com\/blog\/service-desk\/on-premise-software-security-vulnerability-notification \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-47246 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">In November 2023, SysAid was notified by Microsoft of a zero-day path traversal vulnerability allowing for remote code execution, which affects their on-premises ITSM solution. In the investigation conducted by SysAid, it was determined that the vulnerability was being actively exploited by a ransomware affiliate group known as Lace Tempest (DEV-0950), a group known for deploying the CL0P ransomware payload.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-122\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"122\" aria-controls=\"elementor-tab-content-202122\" onclick=\"accordion_toggle('elementor-tab-content-202122 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202122\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-122\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-47246\/#:~:text=CVE%2D2023%2D47246%3A%200,their%20on%2Dpremises%20ITSM%20solution.\" target=\"_blank\">CVE-2023-47246 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-vmware rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(23)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-20887<\/h2><p>Remote code execution vulnerability.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-vmware');\">VMware<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_23\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-20887<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution vulnerability.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/www.vmware.com\/security\/advisories\/VMSA-2023-0018.html \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-20887 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical severity remote code execution (RCE) vulnerability affecting Vmware Aria Operations for Networks. A remote threat actor can exploit this vulnerability by performing a command injection attack to achieve RCE with administrative privileges. Mass scanning in the wild was observed of this vulnerability utilising a public proof of concept exploit. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-123\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"123\" aria-controls=\"elementor-tab-content-202123\" onclick=\"accordion_toggle('elementor-tab-content-202123 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202123\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-123\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-34039\/\" target=\"_blank\">CVE-2023-20887 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-fortra rating-high priv-authenticated type-remote-code-execution   data-score-72\" data-score=\"7.2\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(24)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">7.2<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-0669<\/h2><p>Remote code execution exploited by the Cl0p ransomware group to steal data from over 130 organisations.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-authenticated')\">Authenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-high');\">High<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-fortra');\">Fortra<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_24\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-0669<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Remote code execution exploited by the Cl0p ransomware group to steal data from over 130 organisations.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">7.2<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">High<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/www.fortra.com\/blog\/summary-investigation-related-cve-2023-0669\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-0669 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A high severity zero-day remote code execution (RCE) vulnerability in Fortra GoAnywhere MFT (Managed File Transfer). In January 2023, Fortra discovered a threat actor using this vulnerability to target customer systems, and quickly implemented a temporary service outage to investigate. The Cl0p ransomware group claimed to exploit the vulnerability to steal data from over 130 organisations over the course of 10 days. Ransom notes were sent to upper-level executives of the victim companies.  <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-124\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"124\" aria-controls=\"elementor-tab-content-202124\" onclick=\"accordion_toggle('elementor-tab-content-202124 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202124\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-124\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/actively-exploited-goanywhere-mft-zero-day-vulnerability\/\" target=\"_blank\">CVE-2023-0669 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-qlik rating-medium priv-unauthenticated type-path-traversal   data-score-65\" data-score=\"6.5\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(25)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">6.5<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-41266<\/h2><p>Path traversal vulnerability. Arctic Wolf observed this vulnerability exploited in a Cactus ransomware campaign.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-path-traversal')\">Path Traversal<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-medium');\">Medium<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-qlik');\">Qlik<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_25\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-41266<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Path traversal vulnerability. Arctic Wolf observed this vulnerability exploited in a Cactus ransomware campaign.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">6.5<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Medium<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/community.qlik.com\/t5\/Official-Support-Articles\/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows\/ta-p\/2110801 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-41266 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A path traversal vulnerability stemming from improper user input validation which could allow a remote, unauthenticated threat actor to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow them to send further requests to unauthorised endpoints.\u00a0Arctic Wolf observed this vulnerabiltiy being exploited in a Cactus ransomware campaign in November 2023 among several customers. Although NIST NVD rated this vulnerability as a medium, the reporting entity labled it as high severity.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-125\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"125\" aria-controls=\"elementor-tab-content-202125\" onclick=\"accordion_toggle('elementor-tab-content-202125 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202125\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-125\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-41265-cve-2023-41266-cve-2023-48365\/\" target=\"_blank\">CVE-2023-41266 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-owncloud rating-critical priv-unauthenticated type-information-disclosure   data-score-75\" data-score=\"7.5\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(26)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">7.5<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-49103<\/h2><p>Maximum severity information disclosure vulnerability with mass exploitation attempts since at least November 2023. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-information-disclosure')\">Information Disclosure<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-owncloud');\">ownCloud<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_26\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-49103<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Maximum severity information disclosure vulnerability with mass exploitation attempts since at least November 2023. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">7.5<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/owncloud.com\/security-advisories\/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments\/ \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-49103 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A maximum severity information disclosure vulnerability within the \"graphapi\" extension of OwnCloud, a file sharing service. This is due to the library that graphapi relies on. There have been reported of mass exploitation attempts by threat actors since at least November 2023. Although NIST NVD labeled this vulnerability as high severity, the reporting entity rated this vulnerability at a maximum critical CVSS score of 10.0.<\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-126\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"126\" aria-controls=\"elementor-tab-content-202126\" onclick=\"accordion_toggle('elementor-tab-content-202126 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202126\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-126\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-49103-cve-2023-49104-and-cve-2023-49105-multiple-critical-vulnerabilities-in-owncloud\/\" target=\"_blank\">CVE-2023-49103 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-apache rating-critical priv-unauthenticated type-remote-code-execution   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(27)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-33246<\/h2><p>Critical remote code execution vulnerability used by a new version of the Dreambus botnet.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-remote-code-execution')\">Remote Code Execution<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-apache');\">Apache<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_27\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-33246<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Critical remote code execution vulnerability used by a new version of the Dreambus botnet.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/lists.apache.org\/thread\/1s8j2c8kogthtpv3060yddk03zq0pxyp\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-33246 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical remote code execution (RCE) vulnerability in Apache RocketMQ that was publicly disclosed in May 2023. Subsequently starting in June 2023, a new version of the DreamBus botnet was observed exploiting CVE-2023-33246 to infect devices by targeting RocketMQ's default 10911 port and at least seven other ports. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-127\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"127\" aria-controls=\"elementor-tab-content-202127\" onclick=\"accordion_toggle('elementor-tab-content-202127 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202127\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-127\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-33246\/\" target=\"_blank\">CVE-2023-33246 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-microsoft rating-high priv-authenticated type-privilege-escalation   data-score-78\" data-score=\"7.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(28)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">7.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-28252<\/h2><p>Privilege escalation vulnerability leveraged in Nokoyawa ransomware intrusions.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-authenticated')\">Authenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-privilege-escalation')\">Privilege Escalation<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-high');\">High<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-microsoft');\">Microsoft<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_28\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-28252<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Privilege escalation vulnerability leveraged in Nokoyawa ransomware intrusions.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">7.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">High<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-28252 \" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-28252 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A privilege escalation vulnerability impacting the Windows Common Log File System (CLFS) driver, which could allow a threat actor to obtain SYSTEM level privileges after successful exploitation. This vulnerability was disclosed by Microsoft in their April Patch Tuesday update. This vulnerability was exploited as a zero-day during and was leveraged in Nokoyawa ransomware intrusions.  <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-128\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"128\" aria-controls=\"elementor-tab-content-202128\" onclick=\"accordion_toggle('elementor-tab-content-202128 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202128\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-128\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/multiple-vulnerabilities-patched-with-one-being-actively-exploited-in-microsofts-april-security-update\/\" target=\"_blank\">CVE-2023-28252 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-adobe rating-high priv-unauthenticated type-authentication-bypass   data-score-75\" data-score=\"7.5\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(29)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">7.5<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-29298<\/h2><p>Improper access control vulnerability observed chained with CVE-2023-38203 to deliver web shells. <\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-authentication-bypass')\">Authentication bypass<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-high');\">High<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-adobe');\">Adobe<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_29\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-29298<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Improper access control vulnerability observed chained with CVE-2023-38203 to deliver web shells. <\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">7.5<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">High<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/helpx.adobe.com\/security\/products\/coldfusion\/apsb23-40.html\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-29298 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A high severity improper access control vulnerability that could lead to a security feature bypass. In July 2023 CVE-2023-29298 was observed being chained with CVE-2023-38203 to deliver web shells. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-129\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"129\" aria-controls=\"elementor-tab-content-202129\" onclick=\"accordion_toggle('elementor-tab-content-202129 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202129\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-129\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-29298\/\" target=\"_blank\">CVE-2023-29298 Blog Post<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class = \"aw-vuln-card aw-vuln-article-card mix item_one vendor-ivanti rating-critical priv-unauthenticated type-authentication-bypass   data-score-98\" data-score=\"9.8\"> <a class=\"aw-vuln-article-card_content wrapper open-popup\" onClick=\"offcanvasTrigger(30)\"><h6 class=\"aw-criticality-score-wrap\"><span class=\"aw-criticality-score\">9.8<\/span>\/10<\/h6><span class=\"vuln-name-subhead\">Vulnerability Name:<\/span><h2 class=\"aw-vuln-card-title\">CVE-2023-35078<\/h2><p>Critical authentication bypass vulnerability used to target Norwegian organisations.<\/p><\/a><footer class=\"aw-vuln-article-card_footer lozenge-list wrapper\"><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('all');\">All<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('priv-unauthenticated')\">Unauthenticated<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('type-authentication-bypass')\">Authentication Bypass<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('rating-critical');\">Critical<\/button><button type=\"button\" class=\"control lozenge lozenge__category mixitup-control-active\" onClick=\"lozenge_filter('vendor-ivanti');\">Ivanti<\/button><\/footer><\/div><div style=\"display: none;\" class=\"aw-vuln-canvas-content aw_vuln_canvas_id_30\"><div class=\"aw-vuln-canvas-content-top\"><h6 class=\"aw-vuln-name-subhead\">Vulnerability Name<\/h6><h3 id=\"aw_vuln_canvas_title\" class=\"aw-vuln-canvas-title\">CVE-2023-35078<\/h3><h4 id=\"aw_vuln_canvas_subhead\" class=\"aw-vuln-canvas-title-description\">Critical authentication bypass vulnerability used to target Norwegian organisations.<\/h4><div class=\"aw-vuln-item-content-info\"><div class=\"aw-vuln-col-score\"> CVSS V3 SCORE<ul><li id=\"aw_vuln_canvas_score\">9.8<\/li><\/ul><\/div><div class=\"aw-vuln-col-rating\"> NVD RISK RATING<ul><li id=\"aw_vuln_canvas_rating\">Critical<\/li><\/ul><\/div><div class=\"aw-vuln-col-patch\"> CVE PATCH<ul><li><a id=\"aw_vuln_canvas_patch_link\" class=\"aw-vuln-col-patch-link\" href=\"https:\/\/forums.ivanti.com\/s\/article\/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" data-src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" class=\" ls-is-cached lazyloaded\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\"><noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/elementor\/thumbs\/aw-bandaid-icon-white-lg-pp292i9jlxm9indci2ttjslrw0vjvlwg1pyl8jrigq.png\" \/><\/noscript>View Patch<\/a><\/li><\/ul><\/div><\/div><\/div><div class=\"aw-vuln-canvas-content-main\"><div class=\"aw-vuln-canvas-content-copy\"><h5 id=\"aw_vuln_canvas_sub_title\" class=\"aw-vuln-canvas-title-subhead\">CVE-2023-35078 At A Glance<\/h5><p class=\"aw-vuln-canvas-body-copy\">A critical authentication bypass vulnerability affecting Ivanti Endpoint Manager Mobile. This vulnerability allows allows unauthenticated access to specific API paths, which could allow a threat actor to obtain personal identifiable information (PII) such as names, phone numbers, and other mobile device details. From at least April 2023 through July 2023, threat actors exploited this vulnerability to gather information from several Norwegian organisations and compromise a Norwegian government agency's network. <\/p><div class=\"elementor-element elementor-widget elementor-widget-eael-adv-accordion\" data-element_type=\"widget\" data-widget_type=\"eael-adv-accordion.default\"><div class=\"elementor-widget-container\"><div class=\"eael-adv-accordion aw_vuln_resources_accordion\" id=\"aw_vuln_accordion_id_012345678\" data-scroll-on-click=\"no\" data-scroll-speed=\"300\" data-accordion-id=\"c0f3728\" data-accordion-type=\"accordion\" data-toogle-speed=\"300\"><div class=\"eael-accordion-list\"><div id=\"accordion-tab-title-130\" class=\"elementor-tab-title eael-accordion-header\" tabindex=\"0\" data-tab=\"130\" aria-controls=\"elementor-tab-content-202130\" onclick=\"accordion_toggle('elementor-tab-content-202130 ')\"><span class=\"eael-advanced-accordion-icon-closed\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-plus\"><\/i><\/span><span class=\"eael-advanced-accordion-icon-opened\"><i aria-hidden=\"true\" class=\"fa-accordion-icon fas fa-minus\"><\/i><\/span><span class=\"eael-accordion-tab-title\">Resources<\/span><i aria-hidden=\"true\" class=\"fa-toggle fas fa-angle-right\"><\/i><\/div><div id=\"elementor-tab-content-202130\" class=\"eael-accordion-content clearfix\" data-tab=\"1\" aria-labelledby=\"accordion-tab-title-130\" style=\"display: none;\"><ul><li><a href=\"https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-35078-remote-authentication-bypass-vulnerability-in-ivanti-endpoint-manager-mobile\/\" target=\"_blank\">https:\/\/arcticwolf.com\/resources\/blog\/cve-2023-35078-remote-authentication-bypass-vulnerability-in-ivanti-endpoint-manager-mobile\/<\/a><\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><span class=\"aw-vuln-card-grid_gap\" data-ref=\"first-gap\"><\/span> <span class=\"aw-vuln-card-grid_gap\"><\/span> <span class=\"aw-vuln-card-grid_gap\"><\/span> <\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-57713e5b elementor-widget elementor-widget-html\" data-id=\"57713e5b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<script>\n\t\t\t\tfunction offcanvasTrigger(nNum) { \n\t\t\t\t\t\/\/console.log(jQuery(\".aw_vuln_canvas_id_\" + nNum).html()); \n\t\t\t\t\tjQuery(\".eael-lightbox-container\").html(jQuery(\".aw_vuln_canvas_id_\" + nNum).html());\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tfunction accordion_toggle(sID) {\n\t\t\t\t    jQuery('#' + sID).toggle(400);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tjQuery( \".aw-vuln-article-card_footer\" ).on( \"click\", function(e) {\n  console.log(jQuery(e.target));\n  console.log(jQuery(this).parent());\n  console.log('mixitup: ' + jQuery(e.target).attr(\"class\").search(\"mixitup\") );\n  if (jQuery(e.target).attr(\"class\").search(\"mixitup\") == -1) {\n    jQuery(this).parent().find(\"a\").click();\n  }\n  \n} );\n\njQuery('#leadership-nav li').on('click', function(){\n    jQuery('#leadership-nav li.active').removeClass('active');\n    jQuery(this).addClass('active');\n});\n\n\t\t\t<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7deac4 elementor-widget elementor-widget-html\" data-id=\"7deac4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script src=\"https:\/\/cybersecurity.arcticwolf.com\/rs\/840-OSQ-661\/images\/aw-filters_using-mixitup.min.js\"><\/script>\n\n        <script>\n            \n \/\/ URL Hash for filtering\n\n            var targetSelector = '.mix';\n\n            function getSelectorFromHash() {\n                var hash = window.location.hash.replace(\/^#\/g, '');\n\n                var selector = hash ? '.' + hash : targetSelector;\n\n                return selector;\n            }\n\n\n            function setHash(state) {\n                var selector = state.activeFilter.selector;\n                var newHash = '#' + selector.replace(\/^\\.\/g, '');\n\n                if (selector === targetSelector && window.location.hash) {\n                    \/\/ Equivalent to filter \"all\", remove the hash\n\n                    history.pushState(null, document.title, window.location.pathname); \/\/ or history.replaceState()\n                } else if (newHash !== window.location.hash && selector !== targetSelector) {\n                    \/\/ Change the hash\n\n                    history.pushState(null, document.title, window.location.pathname + newHash); \/\/ or history.replaceState()\n                }\n            }\n\n\n\n            var mixerURL = mixitup('.aw-vuln-display-flexer', {\n                selectors: {\n                    target: targetSelector\n                },\n                load: {\n                    filter: getSelectorFromHash() \n                },\n                callbacks: {\n                    onMixEnd: setHash \n                }\n            });\n\n\n            window.onhashchange = function() {\n                var selector = getSelectorFromHash();\n\n                if (selector === mixerURL.getState().activeFilter.selector) return; \/\/ no change\n\n                mixerURL.filter(selector);\n            };\n            \n  \/\/ end URL Hash for filtering           \n            \n            \n\n\n document.querySelectorAll('.smoothScroll a').forEach(anchor => {\n    anchor.addEventListener('click', function (e) {\n        e.preventDefault();\n\n        document.querySelector(this.getAttribute('href')).scrollIntoView({\n            behavior: 'smooth'\n        });\n    });\n});\n\n\njQuery(window).scroll(function() {    \n    var scroll = jQuery(window).scrollTop();\n\n    if (scroll >= 800) {\n        jQuery(\".mobile-filters\").addClass(\"mobile-filters-active\");\n    } else {\n        jQuery(\".mobile-filters\").removeClass(\"mobile-filters-active\");\n    }\n});\n\nvar isInViewport = function(elem) {\n  var distance = elem.getBoundingClientRect();\n  return (\n    distance.top <= (window.innerHeight || document.documentElement.clientHeight)  &&\n    distance.left >= 0 &&\n    distance.bottom >= 0 &&\n    distance.right <= (window.innerWidth || document.documentElement.clientWidth)\n  );\n};\n\nvar findMe = document.querySelectorAll('#aw-resources');\n\nwindow.addEventListener('scroll', function(event) {\n\nfindMe.forEach(element => {\n    if (isInViewport(element)) {\n      jQuery('.mobile-filters').addClass(\"but-now-inactive\");\n    } else {\n        jQuery(\".mobile-filters\").removeClass(\"but-now-inactive\");\n    }\n});\n}, false);\n        <\/script>   \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-1223afe elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1223afe\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f3b542e gr-border-fade-blue elementor-invisible\" data-id=\"f3b542e\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;animation&quot;:&quot;fadeInLeft&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-dcd62a7 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"dcd62a7\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-dffd15e\" data-id=\"dffd15e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c3138f8 elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"c3138f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInDown&quot;,&quot;_animation_delay&quot;:600}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Reinforce Your Foundation. <span class=\"gr-text\">Amplify Your Resilience.<\/span><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e67772 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"8e67772\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;,&quot;_animation_delay&quot;:200,&quot;_animation_tablet&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In 2024, organisations must ensure that their cybersecurity bedrock is founded on proactive protection and that their resilience against modern threats is amplified. The best way to do that? By learning from the past.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eedd2d4 elementor-mobile-align-center elementor-tablet-align-center gr-button-bs gr-button-dark elementor-invisible elementor-widget elementor-widget-button\" data-id=\"eedd2d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/uk\/reinforce-your-foundation-amplify-your-resilience\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Learn More<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-12e8dee\" data-id=\"12e8dee\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-b0267e9 boxes-pull-right elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b0267e9\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;\\\/uk\\\/2023-data-breaches-in-review\\\/&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-cc2174d\" data-id=\"cc2174d\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c1fe717 elementor-widget elementor-widget-image\" data-id=\"c1fe717\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"900\" height=\"500\" data-src=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2022\/01\/Data-Breaches-in-Review.jpg\" class=\"attachment-large size-large wp-image-61036 lazyload\" alt=\"Web icon with blue lines background\" data-srcset=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2022\/01\/Data-Breaches-in-Review.jpg 900w, https:\/\/arcticwolf.com\/wp-content\/uploads\/2022\/01\/Data-Breaches-in-Review-300x167.jpg 300w\" data-sizes=\"(max-width: 900px) 100vw, 900px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 900px; --smush-placeholder-aspect-ratio: 900\/500;\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eea793c elementor-widget__width-initial blog-box-title ha-has-bg-overlay elementor-widget elementor-widget-heading\" data-id=\"eea793c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">2023 Breaches in Review<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-14d8987 elementor-widget elementor-widget-text-editor\" data-id=\"14d8987\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;,&quot;_animation_tablet&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tOur annual recap of the most noteworthy, high-profile, and damaging cybercrimes of the year.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a65b7ab elementor-align-center button-bottom2 elementor-widget elementor-widget-button\" data-id=\"a65b7ab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/uk\/2023-data-breaches-in-review\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">View The List<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;https:\\\/\\\/cybersecurity.arcticwolf.com\\\/2024-Cybersecurity-Trends-Webinar-Series.html?utm_source=top_vulns_LP&#038;utm_medium=cross_promo&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" data-gbadge=\"{&quot;text&quot;:&quot;Coming Soon!&quot;,&quot;hideIfEmpty&quot;:false,&quot;icon&quot;:false}\" class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-9d8c5c5 premium-gbadge-yes premium-gbadge-custom premium-gbadge-right premium-gbadge-top\" data-id=\"9d8c5c5\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-db5c91c elementor-widget elementor-widget-image\" data-id=\"db5c91c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"900\" height=\"500\" data-src=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2023\/03\/Arctic-Wolf-Labs_aurora.jpg\" class=\"attachment-large size-large wp-image-67092 lazyload\" alt=\"Arctic Wolf Labs logo\" data-srcset=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2023\/03\/Arctic-Wolf-Labs_aurora.jpg 900w, https:\/\/arcticwolf.com\/wp-content\/uploads\/2023\/03\/Arctic-Wolf-Labs_aurora-300x167.jpg 300w\" data-sizes=\"(max-width: 900px) 100vw, 900px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 900px; --smush-placeholder-aspect-ratio: 900\/500;\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-865e018 elementor-widget__width-initial blog-box-title ha-has-bg-overlay elementor-widget elementor-widget-heading\" data-id=\"865e018\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">2024 Arctic Wolf Labs Threat Report<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8b8834 elementor-widget elementor-widget-text-editor\" data-id=\"f8b8834\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;,&quot;_animation_tablet&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tOur annual report offers insights into the strategies and tactics leveraged by threat actors as they sought to profit from business disruptions in 2023, and how to prepare for an uncertain future in 2024.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1f741ec elementor-align-center button-bottom2 elementor-widget elementor-widget-button\" data-id=\"1f741ec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/cybersecurity.arcticwolf.com\/2024-Cybersecurity-Trends-Webinar-Series.html?utm_source=top_vulns_LP&#038;utm_medium=cross_promo\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Webinar Registration<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-181f6451 elementor-section-content-middle elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"181f6451\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3fcf650c\" data-id=\"3fcf650c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-24d4466 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"24d4466\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-9e99d66\" data-id=\"9e99d66\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5dbbc4de elementor-invisible elementor-widget elementor-widget-image\" data-id=\"5dbbc4de\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;,&quot;_animation_mobile&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/resource\/aw\/infographic-what-this-years-top-vulnerabilities-show-us-about-the-future-of-cybersecurity\" target=\"_blank\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"868\" height=\"1024\" data-src=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/Most-Exploited-Vulnerabilities-Infographic-3-page-mock-868x1024.png\" class=\"elementor-animation-grow attachment-large size-large wp-image-88882 lazyload\" alt=\"\" data-srcset=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/Most-Exploited-Vulnerabilities-Infographic-3-page-mock-868x1024.png 868w, https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/Most-Exploited-Vulnerabilities-Infographic-3-page-mock-254x300.png 254w, https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/Most-Exploited-Vulnerabilities-Infographic-3-page-mock.png 1155w\" data-sizes=\"(max-width: 868px) 100vw, 868px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 868px; --smush-placeholder-aspect-ratio: 868\/1024;\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-92cd6c2\" data-id=\"92cd6c2\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6ffea114 premium-header-inline premium-lq__none premium-box-lq__none elementor-invisible elementor-widget elementor-widget-premium-addon-dual-header\" data-id=\"6ffea114\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_tablet&quot;:&quot;none&quot;,&quot;_animation_mobile&quot;:&quot;none&quot;,&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:100}\" data-widget_type=\"premium-addon-dual-header.default\">\n\t\t\t\t\t\n\t\t<div class=\"elementor-widget-container\">\n\t\t<div class=\"premium-dual-header-wrapper\">\n\t\t\t\t\t<p class=\"premium-dual-header-first-header \"><span class=\"premium-dual-header-first-span\"><span class=\"gr-text\">AVAILABLE FOR DOWNLOAD<\/span> <\/span><\/p> \t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-71ee9ac2 elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"71ee9ac2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;,&quot;_animation_delay&quot;:100}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What 2023 Taught Us About Vulnerabilities <\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-407fbf93 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"407fbf93\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;,&quot;_animation_delay&quot;:200}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tRemote Code Execution Reigns, But Other Impact Types Had a Very Good Year \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f1549ef elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"6f1549ef\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;,&quot;_animation_delay&quot;:200}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tThreat actors are continuing to evolve their attacks, evading security solutions by pivoting rapidly and employing multiple paths to value. But the best way to fight back remains a focus on the fundamentals. Download our infographic for quick-hit takeaways to help you reinforce your cybersecurity foundation. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b25752c elementor-align-left elementor-tablet-align-left elementor-mobile-align-center gr-button-blue elementor-invisible elementor-widget elementor-widget-button\" data-id=\"4b25752c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;,&quot;_animation_delay&quot;:400,&quot;_animation_mobile&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/resource\/aw\/infographic-what-this-years-top-vulnerabilities-show-us-about-the-future-of-cybersecurity\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">View The Infographic<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-61083ae elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"61083ae\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-a28859b\" data-id=\"a28859b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-17104de elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"17104de\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:300}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Connect with the Arctic Wolf Cybersecurity Team Today\u00a0<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f286648 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"f286648\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:600}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A combination of Arctic Wolf security operations solutions coupled with expert insights from our Concierge Security<sup style=\"line-height: 0px;\">\u00ae<\/sup> Team (CST) can guide your organisation through Arctic Wolf&#8217;s mission to End Cyber Risk. Fill out the form to learn more and we\u2019ll be in touch with you shortly.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cd95865 elementor-invisible elementor-widget elementor-widget-ArcticWolf-marketo-form\" data-id=\"cd95865\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;,&quot;_animation_delay&quot;:200}\" data-widget_type=\"ArcticWolf-marketo-form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n    \n    <!-- Main Form Styles for Floating Lables-->\n    <link href=\"https:\/\/cybersecurity.arcticwolf.com\/rs\/840-OSQ-661\/images\/AW-mkto-floating-form-labels-styles-211027.css\" rel=\"stylesheet\">\n\n    <!-- Mkto Form Core Scripts-->\n    <script data-ot-ignore src=\"\/\/cybersecurity.arcticwolf.com\/js\/forms2\/js\/forms2.min.js\"><\/script>\n    <form id=\"mktoForm_1002\" onsubmit=\"try {_6si.send(event); } catch (error) { console.error(error);}\"><\/form>\n    <script>MktoForms2.loadForm(\"\/\/cybersecurity.arcticwolf.com\", \"840-OSQ-661\", 1002, function(form) {\n        \t\t\t\n         var formElement = form.getFormElem()[0];\n         formElement.addEventListener(\"submit\", function(event) {\n         window.SixSenseEvent = event;\n         console.info(\"6sense: Form submit initiated.\");\n     });\n     formElement.getElementsByTagName('button')[0].setAttribute('name', 'mktoButton_' + form.getId());\n     formElement.setAttribute('name', 'mktoForm_' + form.getId());\n     form.onSuccess(function() {\n\ttry {\t \n\t if (_6si) {\n     _6si.send(window.SixSenseEvent);\n        console.info(\"6sense: Form submit completed.\");\n     } else {\n         console.warn(\"6sense: Event object not found. Form fill not logged.\");\n     }\n\t} catch (error) {console.error(error);}\n     });\n    });<\/script>\n\n    <!-- Form Script for Styling Attributes-->\n    <script type=\"text\/javascript\" src=\"https:\/\/cybersecurity.arcticwolf.com\/rs\/840-OSQ-661\/images\/AW-mkto-form-style-attributes-210628.js\"><\/script>\n\n    <!-- Floating label script-->\n    <script>\n\n        function floatingLabels() {\n            jQuery('.mktoRadioList, .mktoCheckboxList').parent().children('label').addClass('d-none');\n            jQuery('.mktoForm select:not(\"#Consent_Opt_In__c\") option:nth-of-type(1)').html(\"\");\n\n            var inputs = jQuery('.mktoForm input[type=url], .mktoForm input[type=text], .mktoForm input[type=date], .mktoForm input[type=tel], .mktoForm input[type=email], .mktoForm input[type=number], .mktoForm textarea.mktoField, .mktoForm select.mktoField');\n\n            jQuery(inputs).focus(function(){\n                var fieldID = jQuery(this).attr('id');\n                fieldLabel = 'label.mktoLabel[for=' + fieldID +']';\n                jQuery(fieldLabel).addClass('activeLabel')\n            });\n\n            jQuery(inputs).blur(function(){\n                var fieldID = jQuery(this).attr('id');\n                fieldLabel = 'label.mktoLabel[for=' + fieldID +']';\n                if (jQuery(this).val() == \"\"){\n                    jQuery(fieldLabel).removeClass('activeLabel');\n                }\n            });\n        }\n\n        jQuery(window).on('load',function(){\n            jQuery(document).ready(function() {\n        \t   MktoForms2.whenReady(function (form){\n                 jQuery(floatingLabels)\n                 jQuery('form.mktoForm').on('change', floatingLabels);\n        \t   });\n            });\n        });\n    <\/script>\n\n    <style>\n        form.mktoForm input[type=url], form.mktoForm input[type=text], form.mktoForm input[type=date], form.mktoForm input[type=tel], form.mktoForm input[type=email], form.mktoForm input[type=number], form.mktoForm textarea.mktoField, form.mktoForm select.mktoField, form.mktoForm label.mktoLabel, form.mktoForm .mktoRadioList, form.mktoForm .mktoCheckboxList, form.mktoForm select.mktoField.mktoInvalid:active, form.mktoForm select.mktoField.mktoInvalid:focus, form.mktoForm .mktoCaptchaDisclaimer {\n            color:  #666666 !important;\n        }\n\n        form.mktoForm label.mktoLabel.activeLabel {\n            color: #ff730f !important;\n        }\n\n        form.mktoForm input[type=url], form.mktoForm input[type=text], form.mktoForm input[type=date], form.mktoForm input[type=tel], form.mktoForm input[type=email], form.mktoForm input[type=number], form.mktoForm textarea.mktoField, form.mktoForm select.mktoField {\n            border-bottom: 1px solid #666666 !important;\n        }\n\n        form.mktoForm input[type=url]:focus, form.mktoForm input[type=text]:focus, form.mktoForm input[type=date]:focus, form.mktoForm input[type=tel]:focus, form.mktoForm input[type=email]:focus, form.mktoForm input[type=number]:focus, form.mktoForm textarea.mktoField:focus, form.mktoForm select.mktoField:focus {\n            box-shadow: 0 1px 0 0 #ff730f !important;\n            border-bottom: 1px solid #ff730f !important;\n        }\n\n            <\/style>\n\n    \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-1eeffb24 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1eeffb24\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5df50adf elementor-invisible\" data-id=\"5df50adf\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;animation&quot;:&quot;fadeInUp&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-inner-section elementor-element elementor-element-4c5919c elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"4c5919c\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-3d4b0fdb\" data-id=\"3d4b0fdb\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-48da16fa elementor-vertical-align-middle elementor-invisible elementor-widget elementor-widget-image-box\" data-id=\"48da16fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInDown&quot;,&quot;_animation_delay&quot;:200}\" data-widget_type=\"image-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><p class=\"elementor-image-box-title\">Additional <span style=\"color:#3195d2\">Resources For<\/span><\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1064016d elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"1064016d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInDown&quot;,&quot;_animation_delay&quot;:400}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<span class=\"elementor-heading-title elementor-size-default\"><h2>Security Leaders<\/h2><\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ed9d4ea elementor-invisible elementor-widget elementor-widget-template\" data-id=\"1ed9d4ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;,&quot;_animation_delay&quot;:600}\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"57710\" class=\"elementor elementor-57710\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t\t<section data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-section elementor-top-section elementor-element elementor-element-e36c56c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e36c56c\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2c5558d\" data-id=\"2c5558d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-46520a8 elementor-widget elementor-widget-html\" data-id=\"46520a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div id=\"pf-embed\"><\/div>\n<style>\n\n#pf-embed a.lb-inpage-item div:nth-of-type(1) {\n    padding-top: 55%;\n}\ndiv#qa-website-inject-item-image-0, div#qa-website-inject-item-image-1, div#qa-website-inject-item-image-2 {\n    background-position:center center;\n\tborder-radius: 10px;\n}\na.lb-inpage-item {\n    width: 33.333%;\n    padding: 15px;\n    margin: 10px;\n    background: linear-gradient(0deg, transparent, #CDDCF3);\n    border-radius: 10px;\n\tposition: relative;\n\ttransition: all .25s linear;\n}\na.lb-inpage-item:hover {\n    transform: translateY(-5px);\n}\n\t\n#pf-embed a.lb-inpage-item div:nth-of-type(1):hover:after {\n    color: #0066ff;\n}\n#pf-embed a.lb-inpage-item div:nth-of-type(1):after {\n    content: 'READ MORE \u2192';\n    position: absolute;\n    bottom: -25px;\n    font-size: 14px;\n    letter-spacing: 1px;\n    color: #0099ff;\n    font-weight: 600;\n    justify-content: center;\n    display: flex;\n    width: calc(100% - 30px);\n    transition: all .25s linear;\n}\n#pf-embed a.lb-inpage-item div:nth-of-type(2) {\n    color: black;\n    font-size: 21px;\n    font-family: 'Encode Sans', sans-serif;\n    padding: 10px 0px 25px 0;\n    font-weight: 500;\n    line-height: 1.3em;\n    margin-top: 0;\n    margin-left: 0px;\n    margin-right: 0px;\n\ttext-align: center;\n    }\n#qa-website-inject-title {\n        display: none;\n    }\n#pf-embed a.lb-inpage-item div:nth-of-type(1){transition: all .25s linear;} \n\t\n#pf-embed a.lb-inpage-item div:nth-of-type(1):hover {\n    transition: all 0.25s;\n}\n#pf-embed a.lb-inpage-item div:nth-of-type(1):hover div#qa-website-inject-item-image-0, #pf-embed a.lb-inpage-item div:nth-of-type(1):hover div#qa-website-inject-item-image-1, #pf-embed a.lb-inpage-item div:nth-of-type(1):hover div#qa-website-inject-item-image-2 {\n    height: 200px;\n    box-shadow: 0px -1px 25px #888;\n}\n@media (max-width: 768px) {\na.lb-inpage-item {\n    padding: 0px;\n}\n#pf-embed a.lb-inpage-item div:nth-of-type(2) {\n    padding: 18px 0px 10px 0;\n    font-size: 17px;\n    }\n#qa-website-inject-items {\n        display: block;\n        width: 100%;\n        max-width: 450px;\n        margin: 0 auto;\n    }\n    #pf-embed a.lb-inpage-item div:nth-of-type(1):after {\ndisplay: none;\n}\ndiv#qa-website-inject-item-title-0, div#qa-website-inject-item-title-1, div#qa-website-inject-item-title-2 {\n    margin-bottom: 10px;\n}\n}\n<\/style>\n<script>\njQuery(document).ready(function () {\n    jQuery(window).scroll(function(){\n        var pfURLtrigger = parseInt(jQuery(window).scrollTop());\n\n        if (pfURLtrigger > 500) {\n            jQuery('#pf-embed a').each(function() {\n    var href = jQuery(this).attr('href');\n    if (href) {\n        var url = new URL(href);\n        url.searchParams.set(\"lb-mode\", \"overlay\");\n        jQuery(this).attr('href', url.href);\n    }\n});\n        }\n    });\n});\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-413f16f5 elementor-align-left elementor-tablet-align-center gr-button-blue elementor-invisible elementor-widget elementor-widget-button\" data-id=\"413f16f5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;,&quot;_animation_delay&quot;:700}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"\/resources\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Resource Library<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Arctic Wolf Presents The Most Exploited Vulnerabilities of 2023 There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022. With so many vulnerabilities in play, which ones offered the greatest risk to organisations \u2014 and the greatest potential reward for <a href=\"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/\" class=\"more-link\">&#8230;<span class=\"screen-reader-text\">  The Most Exploited Vulnerabilities of 2023<\/span><\/a><\/p>\n","protected":false},"author":65,"featured_media":88881,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-88880","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>The Most Exploited Vulnerabilities of 2023 - Arctic Wolf<\/title>\n<meta name=\"description\" content=\"There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Most Exploited Vulnerabilities of 2023 - Arctic Wolf\" \/>\n<meta property=\"og:description\" content=\"There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/\" \/>\n<meta property=\"og:site_name\" content=\"Arctic Wolf\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ArcticWolfNetworks\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-14T21:08:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW-MR-Vuln-OG-Image-01-240201.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@AWNetworks\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/\",\"url\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/\",\"name\":\"The Most Exploited Vulnerabilities of 2023 - Arctic Wolf\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/arcticwolf.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/AW-MR-Vuln-OG-Image-01-240201.jpg\",\"datePublished\":\"2024-01-29T19:18:03+00:00\",\"dateModified\":\"2024-10-14T21:08:13+00:00\",\"description\":\"There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/#primaryimage\",\"url\":\"https:\\\/\\\/arcticwolf.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/AW-MR-Vuln-OG-Image-01-240201.jpg\",\"contentUrl\":\"https:\\\/\\\/arcticwolf.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/AW-MR-Vuln-OG-Image-01-240201.jpg\",\"width\":1200,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/the-most-exploited-vulnerabilities-of-2023\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Most Exploited Vulnerabilities of 2023\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/#website\",\"url\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/\",\"name\":\"Arctic Wolf\",\"description\":\"The Leaders in Security Operations\",\"publisher\":{\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/#organization\",\"name\":\"Arctic Wolf Networks\",\"alternateName\":\"Arctic Wolf\",\"url\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/arcticwolf.com\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/AW-Logo-Main-AuroraFY25.png\",\"contentUrl\":\"https:\\\/\\\/arcticwolf.com\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/AW-Logo-Main-AuroraFY25.png\",\"width\":655,\"height\":232,\"caption\":\"Arctic Wolf Networks\"},\"image\":{\"@id\":\"https:\\\/\\\/arcticwolf.com\\\/uk\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/ArcticWolfNetworks\",\"https:\\\/\\\/x.com\\\/AWNetworks\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/arcticwolf\",\"https:\\\/\\\/www.youtube.com\\\/ArcticWolfNetworks\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Most Exploited Vulnerabilities of 2023 - Arctic Wolf","description":"There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/","og_locale":"en_GB","og_type":"article","og_title":"The Most Exploited Vulnerabilities of 2023 - Arctic Wolf","og_description":"There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022.","og_url":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/","og_site_name":"Arctic Wolf","article_publisher":"https:\/\/www.facebook.com\/ArcticWolfNetworks","article_modified_time":"2024-10-14T21:08:13+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW-MR-Vuln-OG-Image-01-240201.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@AWNetworks","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/","url":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/","name":"The Most Exploited Vulnerabilities of 2023 - Arctic Wolf","isPartOf":{"@id":"https:\/\/arcticwolf.com\/uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/#primaryimage"},"image":{"@id":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/#primaryimage"},"thumbnailUrl":"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW-MR-Vuln-OG-Image-01-240201.jpg","datePublished":"2024-01-29T19:18:03+00:00","dateModified":"2024-10-14T21:08:13+00:00","description":"There were over 29,000 vulnerabilities published in 2023, amounting to over 3,800 more common vulnerabilities and exposure (CVEs) being issued last year than in 2022.","breadcrumb":{"@id":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/#primaryimage","url":"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW-MR-Vuln-OG-Image-01-240201.jpg","contentUrl":"https:\/\/arcticwolf.com\/wp-content\/uploads\/2024\/02\/AW-MR-Vuln-OG-Image-01-240201.jpg","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/arcticwolf.com\/uk\/the-most-exploited-vulnerabilities-of-2023\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/arcticwolf.com\/uk\/"},{"@type":"ListItem","position":2,"name":"The Most Exploited Vulnerabilities of 2023"}]},{"@type":"WebSite","@id":"https:\/\/arcticwolf.com\/uk\/#website","url":"https:\/\/arcticwolf.com\/uk\/","name":"Arctic Wolf","description":"The Leaders in Security Operations","publisher":{"@id":"https:\/\/arcticwolf.com\/uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/arcticwolf.com\/uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/arcticwolf.com\/uk\/#organization","name":"Arctic Wolf Networks","alternateName":"Arctic Wolf","url":"https:\/\/arcticwolf.com\/uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/arcticwolf.com\/uk\/#\/schema\/logo\/image\/","url":"https:\/\/arcticwolf.com\/wp-content\/uploads\/2025\/01\/AW-Logo-Main-AuroraFY25.png","contentUrl":"https:\/\/arcticwolf.com\/wp-content\/uploads\/2025\/01\/AW-Logo-Main-AuroraFY25.png","width":655,"height":232,"caption":"Arctic Wolf Networks"},"image":{"@id":"https:\/\/arcticwolf.com\/uk\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ArcticWolfNetworks","https:\/\/x.com\/AWNetworks","https:\/\/www.linkedin.com\/company\/arcticwolf","https:\/\/www.youtube.com\/ArcticWolfNetworks"]}]}},"_links":{"self":[{"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/pages\/88880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/comments?post=88880"}],"version-history":[{"count":0,"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/pages\/88880\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/media\/88881"}],"wp:attachment":[{"href":"https:\/\/arcticwolf.com\/uk\/wp-json\/wp\/v2\/media?parent=88880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}