Effective Strategies for Managing Zero-Day Vulnerabilities by Tom d'Aquino

This report analyzes an upward trend in zero-day vulnerabilities since 2021 using Microsoft and Google data, correlates it with increasing public ransomware incidents, and presents the MOVEit Transfer CVE-2023-34363 exploitation by the CL0P/TA505 actor—detailing web shell (LEMURLOOT) capabilities, associated RATs and tooling (FlawedAmmyy/FlawedGrace, SDBot, Truebot, Cobalt Strike), and advocating AI-driven, post-compromise detection (Vectra AI) to identify attacker behaviors and hidden C2/replication activity.