News and Analysis

Exploitation of known vulnerabilities was the primary method hackers used to gain access to networks in 2022, according to Mandiant’s annual M-Trends report. Notably, the report highlighted high attack volumes from certain threat actors due to the conflict between Russia and Ukraine. Tech vulnerabilities accounted for 32% of initial incursions while phishing accounted for 22% and stolen credentials for 14%. Three vulnerabilities made up almost 90% of exploits, with Log4J accounting for more than 44%. The report also noted that fewer attacks were detected internally in 2022.