A Major Threat To Organizations

This Cyble report documents rapid, active exploitation of multiple critical vulnerabilities (including Atlassian Confluence CVE-2022-26134/26138 etc., Zimbra CVE-2022-37042, Zyxel CVE-2022-30525, VMware Workspace ONE CVE-2022-22954/22960, and WSO2 CVE-2022-29464), highlighting that threat actors quickly weaponize PoCs, use automation and internet-wide scanning to find exposed assets, sell web shells and access on cybercrime forums, and that large exposure counts and CISA listings indicate widespread, high-impact risk; it recommends shifting to risk-based vulnerability management, prioritizing patches, network segmentation, and zero-trust controls.