[ISN] Majority of vulnerabilities now being exploited

From: InfoSec News <alerts_at_private>
Date: Wed, 8 Jul 2009 01:46:11 -0500 (CDT)
http://www.techworld.com/security/news/index.cfm?newsID=118749

By John E. Dunn
Techworld
07 July 2009

The number of exploits being written to target specific software 
vulnerabilities could be at all-time highs, new threat figures have 
suggested.

Fortinet's Threatscape report for June, which actually covers the period 
between 21 May and 20 June, reveals that of the 108 new vulnerabilities 
added to its firewall intrusion detection system in the period, 62 were 
being actively exploited.

This is equivalent to a 57.4 percent exploit rate, a rise over previous 
months and in line with increasing percentages and absolute numbers for 
recent months. For comparison, April-May exploit rates stood at 46.4 
percent, with March-April at 31.3 percent.

Of the top 10 most common vulnerabilities noted by Fortinet, two were 
rated as ‘critical', the highest threat level, seven were rated as 
‘high', and one as ‘medium'. The vast majority of the vulnerabilities 
target holes in desktop software rather than on servers or other types 
of equipment.

[...]


_______________________________________________      
Attend Black Hat USA, July 25-30 in Las Vegas, 
the world's premier technical event for ICT security experts.
Network with 4,000+ delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. http://www.blackhat.com
Received on Tue Jul 07 2009 - 23:46:11 PDT

This archive was generated by hypermail 2.2.0 : Tue Jul 07 2009 - 23:53:18 PDT