CyberzSOC

misuse, in accordance with applicable rules and procedures for public release. Information is subject to The information in this report is being provided “as is” for informational purposes only. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, 1re commendation, or favoring by CISA. This product is not a product of the DHS Office of Homeland Security Statistics or the CISA Statistical Official. Operational data presented in this report reflect trends identified across organizations enrolled in CISA’s Cyber Hygiene Vulnerability Scanning service consistent with our commitment to measure and drive risk reduction across Part 1: Understanding the Part 2: How to Improve Causes of Cyber Risks and Your Organization’s the Importance of Secure Cybersecurity 3 Vulnerability Trends 24 Recommendations Cybersecurity conversations often focus on high-profile incidents involving nation-state adversaries, ransomware groups, and other sophisticated threat actors. However, most compromises have not relied on advanced techniques. They exploited simple, known software vulnerabilities that remain widespread and persistent in publicly exposed assets.