www.trendmicro.com State-Sponsored Actors Target Network Edge Devices Amid Rising Exploits
Article Content
- •Edge devices are now the primary target for state-sponsored cyber espionage.
- •Exploitation of edge devices rose from 3% to 22% of all breaches in one year.
- •Key vulnerabilities include CVE-2023-6548 and CVE-2023-38035, both actively exploited.
Recent reports indicate a significant rise in the exploitation of edge devices, such as VPN gateways and firewalls, by state-sponsored actors. These devices have become the primary attack vector for espionage operations, with exploitation rates increasing from 3% to 22% in just one year. Notable vulnerabilities include CVE-2023-6548 and CVE-2023-38035, which have been actively exploited since their disclosure. The shift in tactics reflects a strategic recalibration by adversaries, moving from traditional phishing to targeting less-defended assets. Security leaders are urged to adopt a proactive defense strategy, including implementing Zero Trust principles. The ongoing threat landscape demands immediate attention to patch vulnerabilities and strengthen defenses against these persistent attacks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2023-38035 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…