Patching Woes: Most Frequently Exploited CVEs Listed August 4, 2021 dangun127) • July 30, 2021 Source: CISA A joint cybersecurity advisory issued by several agencies this week highlighting the ongoing exploits of longstanding software vulnerabilities illustrates the woeful state of patch management, security experts say. The advisory lists the top 30 vulnerabilities - primarily Common Vulnerabilities and Exposures, or CVEs - routinely exploited in 2020 and those being widely exploited so far this year. Prepared by the U.S. Cybersecurity and Infrastructure Agency and the FBI, along with the Australian Cyber Security Center and the U.K.'s National Cyber Security Center, the report says four of the most critical flaws - which should be patched immediately - involved remote work, VPNs or cloud-based technologies.