This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more.X

99 per cent of vulnerabilities have updates available

Share this article:

Almost all software vulnerabilities have updates available.

According to the Security Intelligence Report from Microsoft, less than one per cent of exploits in the first half of 2011 were against zero-day vulnerabilities, while 90 per cent of vulnerabilities were known and had updates available from the software vendor for more than a year.

Compiling data from 600 million users in 105 countries, it also found that social-engineering techniques were employed in almost half (45 per cent) of all malware propagation.

Adrienne Hall, general manager of Microsoft Trustworthy Computing, told SC Magazine that if IT teams are having trouble managing security in their environment and their resources are stretched, then using the cloud for security is a positive step forward.

Hall said: “Twenty per cent of people we researched are thinking about the cloud, but what are they doing on privacy and governance of data? How are they running their systems and what are the workflow challenges? We believe that if they change their workflow and move to the cloud, that can change the IT management in their company.

“The fact that 90 per cent of the vulnerabilities had updates available are challenges for businesses in computing, so a move to cloud passes the responsibility to the cloud provider, who can manage updates. Some prefer to do their own updates, but others will be confident with outsourcing a level of security management.”

Brad Arkin, senior director of product security and privacy at Adobe, said: “The insight about global online threats, including zero-days, from this report helps our mutual customers better prioritise defences to more effectively manage risk. It also provides a good reminder on the importance of keeping systems up to date with the latest security protections.”

Share this article:

SC webcasts on demand

This is how to secure data in the cloud


Exclusive video webcast & Q&A sponsored by Vormetric


As enterprises look to take advantage of the cloud, they need to understand the importance of safeguarding their confidential and sensitive data in cloud environments. With the appropriate security safeguards, such as fine-grained access policies, a move to the cloud is as, or more, secure than an on-premise data storage.


View the webcast here to find out more

More in News

Shellshock: Millions of servers under attack

Shellshock: Millions of servers under attack

In the wake of Shellshock, end-users and security managers race to patch web servers and desktops, but may be forgetting vulnerable embedded devices.

Londoners agree to give child away in return for free WiFi

Londoners agree to give child away in return ...

Hundreds trapped and exposed by fake 'poisoned' WiFi hotspot.

Cybercrime-as-a-service the new criminal business model

Cybercrime-as-a-service the new criminal business model

A new report from Europol's European Cybercrime Centre (EC3) reveals that cybercrime is being increasingly commercialised, and by criminals who use legitimate services to hide their activities.