Establishing of recommendations for information protection from exploitation of current vulnerabilities in 2024

Information security threats are one of the most important problems of our time. In general, a threat is a potential event, action (impact), process or phenomenon that can lead to damage to someone's interests. There are many ways to implement information security threats, but one of the main ones is the exploitation of information security vulnerabilities. According to a recent report by Positive Technologies [1], in 2023, vulnerability exploitation became one of the main methods of attack on organizations (32 %). Vulnerabilities are exploited in accordance with a certain attack scenario, which is conventionally divided into the following stages: conducting reconnaissance, conducting an attack, developing an attack on an information system, obtaining benefits. Thus, this work is devoted to the analysis of a number of information security vulnerabilities in 2024, modeling attack scenarios when exploiting these vulnerabilities and establishing of recommendations for eliminating the possibility of exploiting vulnerabilities based on organizational and technical measures.