Five Eyes infosec agencies list 2023's most exploited software flaws

The Five Eyes agencies published a list of the 15 most exploited vulnerabilities in 2023, highlighting frequent exploitation of zero-days and urging prompt patching and secure-by-design practices; the list includes high-impact flaws across Citrix, Cisco, Fortinet, Progress MOVEit, Atlassian Confluence, Apache Log4j, Barracuda, Zoho ManageEngine, PaperCut, Microsoft (Netlogon and Outlook), JetBrains TeamCity, and ownCloud, with several actively exploited in the wild (e.g., MOVEit and Outlook) and at least one CVSS 10 finding.