2021 Ransomware Quarterly Index Update is here!

March 10: CSW Patch Watch & Security Updates

Posted on 16th Apr, 2021 | By Pavithra Shankar

Highlights of Patch Watch Issue 11

Weaponized Vulnerabilities

We have 46 vulnerabilities that are known exploits. Here is our analysis –

  • 2 CVEs are targeted by 10 APT Groups, Dear Cry ransomware, and PlugX and ShadowPad malware.

  • 5 CVEs are associated with RCE and PE respectively.

  • 10 CVEs are linked to Denial of Service.

  • 16 CVEs are rated high and 24 CVEs are of medium severity.

Click here for our analysis and download patches.

Old Vulnerabilities

323 Old vulnerabilities have been fixed ranging from the year 2010 to 2020.

  • 3 CVEs are associated with RansomEXX and BitPaymer ransomware.

  • 4 CVEs have featured in CISA Alerts.

  • 36 old vulnerabilities are already weaponized and have known exploits

  • 2 CVEs are RCE bugs and 2 CVEs have Privilege Escalation capabilities.

  • 61 CVEs are rated high and 217 are of medium severity.

Click here for our analysis and download patches.

Microsoft March Patches 2021

Microsoft issued patches for 89 security vulnerabilities, including two zero-day vulnerabilities (CVE-2021-26411 & CVE-2021-27077) in Internet Explorer and Windows.

Check out our Microsoft patch edition for more findings.

CISA Alerts

CISA has issued an alert for 14 vulnerabilities.

  • 2 CVEs have known exploits with RCE bugs.

  • 5 CVEs are rated high and 2 are of medium severity.

  • 4 CVEs are associated with 10 APT Groups, 2 malware, and DearCry ransomware.

Click here for our analysis and download patches.

Table: Security Patches March 2021

According to a survey, one in four cyber attacks that were remediated in 2020 were linked to ransomware. We know that security teams are inundated with patches and they have to race against time to reduce their attack surface. CSW's Patchwatch is a good starting point for these security teams. Subscribe to our newsletter for regular updates.

 

Concerned about a cyber-attack?
Want to know more about Vulnerability Management as a Service. 
Talk to us.

 

 

Test your defense to know how secure you are…