Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Payment Card Industry Data Standards and Data Loss Prevention | Main | CSI Survey: Insiders Bigger Threat than Viruses »

Microsoft, Apple and Oracle Top Most Vulnerable List

IBM Internet Security Systems' X-Force R&D group published a cyberattack report that inlcuded a list of most vulnerable vendors. The top five were Microsoft, Apple, Oracle, Cisco and Sun (IBM was 6th). eWeek notes:

The report also says that 21 percent of vulnerabilities disclosed by the top 5 vendors remain unpatched—up from a year ago, when only 14 percent of the top vendors' vulnerabilities stayed open in the same timeframe.

While that might seem alarming, it's notable that 60 percent of vulnerabilities from all other vendors found in the first half of the year remained unaddressed.

The vast majority—90 percent—of the 3,273 vulnerabilities reported in the first half of the year can be exploited remotely. And more than half—51.6 percent—of the vulnerabilities found would give an attacker access to the host after exploitation.

The fact that Microsoft and Oracle were in the top three is no surprise but with Apple taking the silver it's hard to argue that Mac's are all that much safer than Windows. That's got to hurt Mac fan/MS haters.

Such a high percentage of unpatched vulnerabilities is more telling to me. Trends are also key, if the rate of patched vulnerabilities is improving I'd be less concerned. Time to dig for more statistics.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/433

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net