The Five Eyes, an Anglosphere intelligence alliance comprising Australia, Canada, New Zealand, the United Kingdom, and the United States, has issued a warning around the growing threat Zero Day vulnerabilities present to organisations, reinforcing the need for organisations to prioritise patch management. In response to the news, Juliette Hudson, CTO of CybaVerse, (pictured), gives her view.

“This is an interesting update from the Five Eyes that organisations should pay attention to.

“Organisations often only see phishing as the avenue criminals use to breach their networks, but research has recently showed that exploiting vulnerabilities is now fast becoming a top attack vector.

“Criminals can exploit weaknesses in software to break into networks, often changing security settings and elevating privileges before deploying malware, like ransomware.

“This can prove catastrophic for organisations and must act as a warning that all vulnerabilities should be patched as soon as patches are released.

“Compounding the challenge, cybercriminals are now leveraging AI to rapidly scan networks and pinpoint systems vulnerable to specific CVEs. This minimises the effort required to identify targets and dramatically accelerates the attack lifecycle.

“Organisations must be vigilant and patch zero days and critical CVEs, when available, or follow mitigation steps as an interim. This is a priority step and key to keeping safe.”

For more cybersecurity news, click here