“We cover these lists every year, but the same names keep cropping up.”
Citrix takes the top two spots. Cisco IOS XE takes third and fourth, Fortinet fifth, MOVEit sixth. Log4j from 2021 is still eighth, and the Netlogon bug has made the list four years running. The most exploited software of 2023 is the gear companies bought specifically to keep attackers out.