State-Sponsored Actors Target Network Edge Devices Amid Rising Exploits

Recent reports indicate a significant rise in the exploitation of edge devices, such as VPN gateways and firewalls, by state-sponsored actors. These devices have become the primary attack vector for espionage operations, with exploitation rates increasing from 3% to 22% in just one year. Notable vulnerabilities include CVE-2023-6548 and CVE-2023-38035, which have been actively exploited since their disclosure. The shift in tactics reflects a strategic recalibration by adversaries, moving from traditional phishing to targeting less-defended assets. Security leaders are urged to adopt a proactive defense strategy, including implementing Zero Trust principles. The ongoing threat landscape demands immediate attention to patch vulnerabilities and strengthen defenses against these persistent attacks.

Key Points: • Edge devices are now the primary target for state-sponsored cyber espionage. • Exploitation of edge devices rose from 3% to 22% of all breaches in one year. • Key vulnerabilities include CVE-2023-6548 and CVE-2023-38035, both actively exploited.