Top attack vectors: September 2021

This September 2021 SOC report highlights three main threats: exploitation of public-facing vulnerabilities (notably CVE-2020-36239 and CVE-2021-26084) repeatedly used to deploy XMRig cryptominers; widespread use of PowerShell and .NET by malware (e.g., SolarMarker) to obfuscate payloads; and a majority of critical incidents being BEC, with attackers increasingly harvesting SSO credentials (Okta) to move into cloud apps — the report provides detection signals and actionable resilience recommendations such as EDR, MFA, PowerShell logging, patching, and WAFs.