Annual review regarding vulnerabilities and attacks for 2020

The aim of this review is to highlight the general tendencies and threat evolution to help the community to enhance their protections.

This document is available on Cert-IST public website:

• in English: Annual Report on Attacks and Vulnerabilities seen in 2020
• in French: Bilan Cert-IST 2020 des failles et attaques

In this report, Cert-IST analyzed the main events of 2020:

• The cyber threat induced by the Covid-19 crisis
• Ransomware's attacks against companies
• Attacks against VPN access and exposed Appliances
• Orion SolarWinds and Supply-chain attacks
• DDOS attacks
• Increasingly sophisticated state-sponsored attacks
• Technical developments observed in 2020