Threat actors exploited Follina in unpatched systems to deploy Qbot and other Remote Access Trojans (RATs), making Follina one of the most frequently used vulnerabilities discovered in 2022. Fortinet Two critical bugs in Fortinet products reported in October 2022 (CVSS score: 9.6) and December (CVSS score: 9.3) allow unauthenticated attackers to execute arbitrary code using specially crafted requests. The company issued updates while CISA warned of significant risk to federal organizations. Exploitation attempts of CVE-2022-40684 at the beginning of 2023 affected 18% of organizations. The Best Prevention: Patching. Cloud IPS. SASE. All Together Now. Attackers exploit exposed Windows Remote Desktop Protocol (RDP) services and unpatched RCE vulnerabilities to execute commands and place malicious code in a network. Mail servers are often the weak link.