[ISN] Attackers find old vulnerabilities are still the best

From: InfoSec News <alerts_at_private>
Date: Thu, 7 Apr 2011 02:17:25 -0500 (CDT)
http://gcn.com/articles/2011/04/05/hp-cybersecurity-report-old-vulnerabilities.aspx

By William Jackson
GCN.com
April 05, 2011

The number of new vulnerabilities being discovered has leveled off for 
the past two years and is well down from its 2006 peak, according to a 
report on 2010 security trends from Hewlett-Packard, an indication that 
secure software development is beginning to mature.

But that is small comfort, as attackers continue to successfully exploit 
existing vulnerabilities, said Dan Holden, director of HP DVLabs and a 
contributor to the report.

“There is a lot of attack surface for the attackers to choose,” Holden 
said. “They don’t need any more vulnerabilities to be successful.”

Attackers are supported in their efforts by exploit toolkits that are 
becoming more professional and better packaged and by the lack of 
patching done by many computer users to correct known vulnerabilities in 
software.

[...]


___________________________________________________________      
Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery 
Network, Cisco Switches, SAS 70 Type II Datacenter. 
Find peace of mind, Defend your Critical Infrastructure.
http://www.tegataiphoenix.com/
Received on Thu Apr 07 2011 - 00:17:25 PDT

This archive was generated by hypermail 2.2.0 : Thu Apr 07 2011 - 00:22:09 PDT