IBM Reports About Software Security Vulnerabilities
By Luciana on March 16, 2010 | Computer Security, IBM, IBM's X-Force 2009 Trend, Risk, SQL Injections, ActiveX, toolkit, Phishing
At IBM's X-Force 2009 Trend and Risk report is shown that vulnerabilities of 2009 has dropped. These vulnerabilities are 11 percent lower that it was on 2008, including a decline in huge categories like SQL Injections and ActiveX.
Nick Bradley a manager with IBM's managed security services intelligence centre commented that SQL Injection gained a lot of popularity as "proverbial flavour of the month," and was later exploited to the point that there were few who didn't know what it was.
Bradley also pointed out that 11 percent drop decline in vulnerabilities is a very big deal in terms of the overall number of vulnerabilities.
What is more, the report states that was also found a significant increase in attacks using obfuscation, usually purchased using automated exploit toolkits in order to hide from security software. Bradley says that since security awareness goes both ways it's natural that malware vendors will strive to exploit the same flaws that the security industry tries cancel.
"It's like a game of cyber cat and mouse, now that the mouse is aware that the cat is watching, it's going to look for new hiding places and safer modes of travel," commented Nick Bradley.
Moreover, the report also states that new malicious web links increased indicating that attackers are getting more professional at hosting malicious sites. Phishing scams still continue to target the financial industry.
More Computer Security news
'Nazileaks' site is hacked by hacker group Anonymous
Anonymous hacker group attacked German's new site, Nazi-leaks.net. They claim having personal information captured from a variety of extreme right wing websites. A Tweet message when trying to log onto Nazi website claimed: "We wish all Nazis a good start to the New Year." This Anonymous operation was called Blitzkreig and was discovered this week, nevertheless, it remained much longer till noticed. Read more.- Spywared.com wishes you happy holidays!
- Silent IE updates
- Anonymous and Team Poison duet create Operation Robin Hood
- Unprotected data still remains at British businesses
- 12 vulnerabilities are fixed by Adobe
- Be ready for Halloween scare on Internet: avoid scam attacks
- Who's fault is the mess on Youtube?
- Survey reveals overconfidence about security systems
- Google updated Chrome; Microsoft feels guilty for deleting browser
- Flaws are patched with new Flash Player Update
