Q1 Vulnerability Roundup

A Q1 2021 vulnerability roundup describing widespread exploitation of remote code execution vulnerabilities: active targeting of VPN flaws, exploitation of long-standing IoT router bugs by botnets like ZHTrap and Mirai variants, and the Microsoft Exchange 'ProxyLogon' zero-days (exploited by HAFNIUM and multiple APTs) that led to tens of thousands of impacted servers and web shells; the report notes ransomware and malware opportunistically leveraging these flaws and discusses mitigation and remediation efforts.