Hackers use PoC exploits in attacks 22 minutes after release

Teilen:

Threat actors are quick to weaponize available proof-of-concept (PoC) exploits in actual attacks, sometimes as quickly as 22 minutes after exploits are made publicly available.

That is according to Cloudflare’s Application Security report for 2024, which covers activity between May 2023 and March 2024 and highlights emerging threat trends.

Cloudflare, which currently processes an average of 57 million HTTP requests per second, continues to see heightened scanning activity for disclosed CVEs, followed by command injections and attempts to weaponize available PoCs.

During the examined period, the most targeted flaws were CVE-2023-50164 and CVE-2022-33891 in Apache products, CVE-2023-29298, CVE-2023-38203 and CVE-2023-26360 in Coldfusion, and CVE-2023-35082 in MobileIron.

A characteristic example of the rise in the speed of weaponization is CVE-2024-27198, an authentication bypass flaw in JetBrains TeamCity.

Cloudflare observed a case of an attacker deploying a PoC-based exploit 22 minutes after its publication, leaving defenders essentially no margin for remediation opportunity.

The internet firm says the only way to combat this speed is to employ AI assistance to quickly develop effective detection rules.

“The speed of exploitation of disclosed CVEs is often quicker than the speed at which humans can create WAF rules or create and deploy patches to mitigate attacks,” explains Cloudflare in the report.

“This also applies to our own internal security analyst team that maintains the WAF Managed Ruleset, which has led us to combine the human written signatures with an ML-based approach to achieve the best balance between low false positives and speed of response.”

Cloudflare says this is partially the result of specific threat actors specializing in certain CVE categories and products, developing an in-depth understanding of how to quickly take advantage of new vulnerability disclosures.

6.8% of all internet traffic is DDoS

Another staggering highlight in Cloudflare’s report is that 6.8% of all daily internet traffic is distributed denial of service (DDoS) traffic aimed at rendering online apps and services unavailable to legitimate users.

This is a notable increase compared to the 6% recorded over the previous 12-month period (2022-2023), showing an increase in the overall volume of DDoS attacks.

Cloudflare says that during large global attack events, malicious traffic may account for as much as 12% of all HTTP traffic.

“Focusing on HTTP requests only, in Q1 2024 Cloudflare blocked an average of 209 billion cyber threats each day (+86.6% YoY) […which] is a substantial increase in relative terms compared to the same time last year,” says Cloudflare.

The firm’s PDF report, available for download here, provides additional recommendations for defenders and deeper insights into the compiled stats.

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
1:44 pm, Feb. 8, 2025
Wetter-Symbol 6°C
L: 5° | H: 6°
overcast clouds
Luftfeuchtigkeit: 91 %
Druck: 1018 mb
Wind: 10 mph ENE
Windböe: 0 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 100%
Regen Chance: 0%
Sichtbarkeit: 3 km
Sonnenaufgang: 7:27 am
Sonnenuntergang: 5:02 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 9:00 pm
Wetter-Symbol
5° | 6°°C 0 mm 0% 4 mph 91 % 1021 mb 0 mm/h
Tomorrow 9:00 pm
Wetter-Symbol
3° | 5°°C 1 mm 100% 10 mph 97 % 1030 mb 0 mm/h
Mo. Feb. 10 9:00 pm
Wetter-Symbol
3° | 4°°C 1 mm 100% 11 mph 96 % 1029 mb 1.38 mm/h
Di. Feb. 11 9:00 pm
Wetter-Symbol
3° | 4°°C 0.38 mm 38% 8 mph 97 % 1020 mb 0 mm/h
Mi. Feb. 12 9:00 pm
Wetter-Symbol
4° | 6°°C 0 mm 0% 5 mph 92 % 1023 mb 0 mm/h
Today 3:00 pm
Wetter-Symbol
6° | 6°°C 0 mm 0% 4 mph 91 % 1018 mb 0 mm/h
Today 6:00 pm
Wetter-Symbol
5° | 6°°C 0 mm 0% 4 mph 88 % 1019 mb 0 mm/h
Today 9:00 pm
Wetter-Symbol
4° | 5°°C 0 mm 0% 3 mph 84 % 1021 mb 0 mm/h
Tomorrow 12:00 am
Wetter-Symbol
3° | 3°°C 0 mm 0% 3 mph 84 % 1024 mb 0 mm/h
Tomorrow 3:00 am
Wetter-Symbol
3° | 3°°C 0 mm 0% 4 mph 87 % 1025 mb 0 mm/h
Tomorrow 6:00 am
Wetter-Symbol
4° | 4°°C 0.29 mm 29% 7 mph 94 % 1026 mb 0 mm/h
Tomorrow 9:00 am
Wetter-Symbol
4° | 4°°C 0.99 mm 99% 7 mph 97 % 1028 mb 0 mm/h
Tomorrow 12:00 pm
Wetter-Symbol
4° | 4°°C 1 mm 100% 10 mph 96 % 1028 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€93,125.19
-1.31%
Ethereum(ETH)
€2,531.33
-4.55%
Fesseln(USDT)
€0.97
-0.03%
XRP(XRP)
€2.33
0.95%
Solana(SOL)
€188.53
-1.02%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.241317
-1.29%
Shiba Inu(SHIB)
€0.000015
2.62%
Pepe(PEPE)
€0.000009
-0.81%
Nach oben scrollen