0-day And Hitlist Week -06-12-2024- May 2026

Published: June 19, 2024 | Analysis Period: June 6 – June 12, 2024

The week of June 6 to June 12, 2024 (formatted as -06-12-2024- in industry logs), will be remembered as a particularly volatile seven-day stretch in the vulnerability management landscape. Cybersecurity teams faced a daunting “two-front war”: defending against publicly disclosed 0-day exploits (vulnerabilities with no available patch at the time of discovery) while simultaneously triaging the ever-evolving “Hitlist”—a curated set of the most dangerous, weaponized vulnerabilities actively used in ransomware and state-sponsored attacks.

This article provides a deep-dive retrospective into the key events of that week, the critical patches released, and the shifting tactics of threat actors. 0-day and Hitlist Week -06-12-2024-

This week has seen a shift in focus from mass exploitation to targeted supply chain chaining. The "Hitlist" (assets being actively prepped for exploitation by ransomware groups) shows a 40% increase in scanning against edge network devices compared to last week.

The following CVEs represent the Top 3 most scanned vulnerabilities on the ingress of corporate networks this week. Ransomware affiliates are paying bounties for access via these specific flaws. Published: June 19, 2024 | Analysis Period: June

| Rank | CVE ID | Asset Type | Exploit Maturity | Affiliate Bounty | | :--- | :--- | :--- | :--- | :--- | | 1 | CVE-2023-46805 (Ivanti) | Edge Gateways | Weaponized | $15,000 | | 2 | CVE-2024-2875 (QNAP QTS) | NAS Devices | Automated (MassScan) | $8,000 | | 3 | CVE-2022-47966 (ManageEngine) | AD Integration | LDAP Injection | $5,000 |

A legacy 0-day re-emerged. Researchers published a bypass for a 2012 PHP vulnerability (CVE-2012-1823), now tracked as CVE-2024-4577. This week has seen a shift in focus

For security architects, this specific week highlighted two painful realities: