CISA Top 20 CVEs Exploited by People's Republic of China State-Sponsored Threat Actors

On October 6, the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA) and Federal Bureau of Investigation (FBI) issued a joint cybersecurity advisory detailing the top 20 CVEs exploited by the People’s Republic of China (PRC) state-sponsored threat actors since 2020. These vulnerabilities have been used to target a variety of U.S. and allied networks, including software and hardware companies with the explicit goal to “steal intellectual property and develop access into sensitive networks.” This advisory follows a similar advisory in October 2020, where the NSA published a list of 25 known vulnerabilities exploited by Chinese state-sponsored actors.

For more information about the 20 vulnerabilities, including Tenable product coverage, please visit our blog.