Government Advisory

CISA Report: Most Cyberattacks Exploit Basic, Known Software Flaws

CISA · 26 Aug 2026

Key Takeaway Regularly patch and update all software and systems, especially those exposed to the internet, since most breaches exploit known, preventable vulnerabilities rather than sophisticated attacks.

A new report from the US Cybersecurity and Infrastructure Security Agency (CISA) confirms what many security professionals have long suspected: most cyberattacks don't rely on advanced hacking skills or cutting-edge tools. Instead, attackers routinely scan the internet for exposed systems running well-known, unpatched software vulnerabilities and exploit those basic weaknesses to gain access.

The CISA Vulnerability Review, based on data from fiscal years 2024 and 2025, examines the root causes behind insecure software and identifies recurring weaknesses that make systems easy targets. It establishes a baseline understanding of today's threat landscape ahead of an expected shift as AI tools make vulnerability discovery faster and more widespread. The report also promotes 'Secure by Design' principles, encouraging software makers and organizations to build security in from the start rather than scrambling to patch problems after attackers strike.

For small and medium businesses, the takeaway is reassuring in one sense: most attacks aren't highly sophisticated, meaning many can be prevented with consistent basic hygiene. Keeping software updated, closing off unnecessary exposed services, and prioritizing fixes based on real risk can significantly reduce the chances of becoming an easy target.

Summarised by CISO AI from CISA. We link back to every original so you can read it yourself.