Heartbleed, Shellshock and POODLE: The sky is not falling

Minimalist · Oct 26, 2014

Security professionals typically refer to vulnerabilities using a combination of the vulnerable software name and actual vulnerability. If it's an older vulnerability researchers might also add in the unique CVE number. Heartbleed, Shellshock and POODLE do not fall under the typical vulnerability-naming protocol. They are the start of a new trend – naming vulnerabilities like researchers name malware (i.e. Zeus, Pony, etc.). The catchier the name, the more attention it may receive.

For example, POODLE was repeatedly reported publicly although it's not nearly as severe as the Heartbleed and Shellshock vulnerabilities. Another example, Microsoft released patches for three other zero days this month – all of which were critical and were being actively exploited in the wild. The Sandstorm vulnerability – which was the only one with the catchy name - received far more attention than the other two despite being less severe.
Click to expand...

http://www.scmagazine.com/heartbleed-shellshock-and-poodle-the-sky-is-not-falling/article/379301/

siljaline · Oct 27, 2014

Keep calm and plug the holes

Log in or Sign up

Heartbleed, Shellshock and POODLE: The sky is not falling

Minimalist Registered Member

siljaline Registered Member

Log in or Sign up

Heartbleed, Shellshock and POODLE: The sky is not falling

Minimalist Registered Member

siljaline Registered Member

Useful Searches