January 2025 Vulnerability Review – Key Takeaways

Overview

• 781 security advisories published, marking the lowest count in 12 months.
• Third consecutive month of decline, breaking the historical trend of increased January advisories.
• 16 advisories lacked CVE IDs, affecting vendors like Trend Micro, Suse Linux, Red Hat, and CA.

Notable Exploited Vulnerabilities

• Fortinet (CVE-2024-55591): Zero-day authentication bypass, granting super-admin privileges. Exploited since November 2024. Update to version 7.0.17.
• Ivanti Connect Secure (CVE-2025-0282 & CVE-2025-0283): Remote code execution and privilege escalation vulnerabilities. Limited active exploitation confirmed. Update to version 22.7R2.5.
• Microsoft Patch Tuesday: 159 vulnerabilities patched, including 8 zero-days and 3 actively exploited flaws.

Trends and Key Insights

• Linux Foundation continues reporting a high volume of low-risk vulnerabilities, requiring significant validation efforts.
• Out of 114 Linux Foundation advisories analyzed, 77 were rejected, and 37 were marked Not Critical.
• 460 advisories carried a significant threat score, emphasizing the need for risk-based prioritization.

Recommendations for Security Teams

• Focus on real-world exploitability rather than just CVSS scores.
• Apply patches for high-risk vulnerabilities without delay.
• Use automated threat intelligence to reduce response times and improve risk management.

While the number of vulnerabilities has decreased, the risk remains high. A proactive approach to vulnerability management is critical in addressing emerging threats.

How is your organization prioritizing remediation in 2025?