SecPod

Learn Search

Search across all Learn content

← Back to Security Research
The Most Notorious Security Risks Tagging Along from 2020

The Most Notorious Security Risks Tagging Along from 2020

2020 has been a disaster for many organizations: multiple data breaches, ransomware attacks, and internal threats. After 2020, IT as a department and a role have changed for the good. Leaders are more receptive to the opinions and initiatives of CIO/CISO/IT Head roles. Every IT professional now give...

Apr 8, 2021By Pranav Krishnan2 min read

2020 has been a disaster for many organizations: multiple data breaches, ransomware attacks, and internal threats. After 2020, IT as a department and a role have changed for the good. Leaders are more receptive to the opinions and initiatives of CIO/CISO/IT Head roles. Every IT professional now given more responsibilities for remote IT management. However, there is always an extra component in security that could use some attention. A vulnerability management tool can help prevent these attacks.

The silent criminal

Even though organizations are more sensitive and proactive towards cyber-security, there is always one important component of security that often overlooked. Yes, you guessed it. Vulnerabilities in endpoints. In most cases of cyber-attacks, vulnerabilities serve as entry points to an attacker. However, a patch management tool can patch these vulnerabilities.

Almost all security advisories ever published end with something along the lines of“install all security updates and upgrade to the latest version to be secure.” Even IT professionals sometimes forget how crucial it is to keep endpoints free from vulnerabilities. While the focus on new anti-malware and threat response technologies needed, looking for vulnerabilities and mitigating them goes a long way in preventing attacks in the first place.

Top vulnerabilities of 2020

Every year, around 19,000 vulnerabilities are reported to the National Vulnerability Database(NVD). However, like business risks, security risks can be brought down as low as possible but not entirely eliminated. If you choose your battles correctly, security risks reduced to very minimal levels.

Download our new “Top Vulnerabilities Report 2020”. This report contains a list of endpoint vulnerabilities from January 2020 to December 2020 that have either caused severe damage or pose severe risks.

SecPod’s Security Research Team analyzed all vulnerabilities and narrowed down the options considering two factors:

    1. Critical and High-risk CVSS ratings
    2. Increased exploit activity and potential

The vulnerabilities listed in the report are the most notorious kinds that made last year even worse for us. Mitigating these 20 vulnerabilities will go a long way in bringing down your security risk scores.

Mitigate all the vulnerabilities if you have not yet. Let’s eliminate the bad stuff from 2020 before going any further this year.

Featured Posts

Open Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras
Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

CVE Research

Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

A single operator compromised 14,530+ Dahua cameras across Ukraine and Russia in 35 days, chaining credential brute-force, a CVE-2021-33044/33045 authentication bypass, and P2P relay abuse to plant a persistent backdoor and harvest transferable admin access.

Aug 21, 2026

Open Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF
Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE Research

Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE-2026-19478 is a critical code injection vulnerability in GitLab CE/EE that allows an unauthenticated attacker to modify or delete public projects and user data by abusing a GraphQL directive. A second high-severity issue, CVE-2026-19650, involves cross-site request forgery in the GraphQL multiplex query handler. This article examines how the critical vulnerability works, the availability of a public proof-of-concept, the potential impact on self-managed instances, the affected versions, and the security updates released to remediate both issues.

Aug 19, 2026

Open No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners
No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

CVE Research

No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

Aug 19, 2026

Open Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies
Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

CVE Research

Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

Aug 19, 2026

The Most Notorious Security Risks Tagging Along from 2020 | SecPod