"12 New Flaws Used in Ransomware Attacks in Q3"

Researchers at Cyber Security Works and Cyware conducted a new study and found that there was a 4.5% increase in CVEs associated with ransomware and a 3.4% increase in ransomware families compared with Q2 2021.  A dozen new vulnerabilities were used in ransomware attacks this quarter, bringing the total number of bugs associated with ransomware to 278.   Five of the newly found vulnerabilities can be used to achieve remote code execution (RCE), while two can be used to exploit web apps and launch denial-of-service (DoS) attacks. The researchers also found that ransomware groups are still finding and exploiting zero-day weaknesses before CVEs are hatched and patched. During their research, the researchers identified five new ransomware families, bringing the total to 151. 

Threatpost reports: "12 New Flaws Used in Ransomware Attacks in Q3"