The UK’s National Cyber Security Centre with it’s partners in the Five Eyes, has issued an advisory for the top exploited software vulnerabilities in 2021 – meaning they could continue being the top exploits in 2022.
2021 Top Routinely Exploited Vulnerabilities | CISA
Microsoft Exchange server, VMware, SonicWall and Log4j feature prominently in the list.
This guidance will give you a head start on the steps you need to take to protect yourself from these and similar exploits.