Exploits and vulnerabilities in Q1 2024

Kaspersky presents an analysis of vulnerability trends and exploit activity for 2023–Q1 2024, showing increasing numbers of registered CVEs and publicly available exploits, active exploitation observed in telemetry, and APT usage patterns; notable Q1 2024 issues include an injected backdoor in the XZ compression library, a Visual Studio DACL-reset privilege escalation, a container escape in runc, active ScreenConnect and TeamCity web vulnerabilities, a SmartScreen bypass technique, and continued exploitation of the WinRAR flaw, with recommendations to prioritize asset visibility, patch management, and layered defenses.