IBM Reports About Software Security Vulnerabilities
By Luciana on March 16, 2010 | Computer Security, IBM, IBM's X-Force 2009 Trend, Risk, SQL Injections, ActiveX, toolkit, Phishing
At IBM's X-Force 2009 Trend and Risk report is shown that vulnerabilities of 2009 has dropped. These vulnerabilities are 11 percent lower that it was on 2008, including a decline in huge categories like SQL Injections and ActiveX.
Nick Bradley a manager with IBM's managed security services intelligence centre commented that SQL Injection gained a lot of popularity as "proverbial flavour of the month," and was later exploited to the point that there were few who didn't know what it was.
Bradley also pointed out that 11 percent drop decline in vulnerabilities is a very big deal in terms of the overall number of vulnerabilities.
What is more, the report states that was also found a significant increase in attacks using obfuscation, usually purchased using automated exploit toolkits in order to hide from security software. Bradley says that since security awareness goes both ways it's natural that malware vendors will strive to exploit the same flaws that the security industry tries cancel.
"It's like a game of cyber cat and mouse, now that the mouse is aware that the cat is watching, it's going to look for new hiding places and safer modes of travel," commented Nick Bradley.
Moreover, the report also states that new malicious web links increased indicating that attackers are getting more professional at hosting malicious sites. Phishing scams still continue to target the financial industry.
More Computer Security news
39 flaws are fixed by Apple
Apple released OS X Lion 10.7.4 in order to fix 35 security holes as well as 4 vulnerabilities in the Safari web browser. The problem with Time Machine in OS X Lion is fixed with the new update. These flaws could enable a remote attacker to access a user's backup credentials. An issue is solved with Directory Service which could allow exposing sensitive data by the attacker. Read more.- Apple fixes Java flaw (April 2012)
- Google releases Chrome 17 update
- More patches for Flash Player (March 2012)
- Enterprises do not trust cloud computing, claims study
- Flash bug removed; Adobe released 7 patches
- Adobe news: Sandboxed Flash Player for Firefox released
- How to get PDF secured?
- 'Nazileaks' site is hacked by hacker group Anonymous
- Spywared.com wishes you happy holidays!
- Silent IE updates
