This article on Dark Reading about a report published by cybersecurity firm Rezilion states that “[m]ore than 15 million instances of Internet-connected applications, services, and devices are vulnerable to software flaws that the US government has confirmed are being exploited by attackers in the wild.” While “[t]ypically, only a small fraction of vulnerabilities are exploited every year”, Yotam Perkal, director of vulnerability research at Rezilion, is quoted as saying that vulnerabilities “are being exploited, continuously, by sophisticated threat actors as well as advanced persistent threat (APT) groups.”
Furthermore, these estimates could be conservative “as the services affected by more than one vulnerability were counted only once” and Perkal reportedly thinks that “it is safe to assume that the actual number of vulnerable instances is much higher.”
Read the full article here.