H1 2014 Endpoint Exploitation Trends

The Bromium Labs team got together and came up with a summary of notable exploitation trends that
we observed in the first 6 months of 2014. There were some interesting takeaways:

The full report is available to download. (PDF)

http://labs.bromium.com/2014/07/22/h1-2014-endpoint-exploitation-trends/

 

Hmm. I wonder if the combination of old (Mozilla) Flash plugin and ASLR bypass through ActionScript will start making desktop Linux a target. How many people still use the Mozilla Flash plugin on Linux?

 

I recommend reading the conclusions on page 7.

 

- 2014 -

I.E. 11 94:

http://www.cvedetails.com/version/156607/Microsoft-Internet-Explorer-11.html

I.E.10 82:

http://www.cvedetails.com/version/138705/Microsoft-Internet-Explorer-10.html

I.E. 9 78

http://www.cvedetails.com/version/129812/Microsoft-Internet-Explorer-9.html

I.E.8 59:

http://www.cvedetails.com/version/57626/Microsoft-Internet-Explorer-8.html