The pace of vulnerability disclosure shows no signs of slowing

guest · May 15, 2018

The pace of vulnerability disclosure shows no signs of slowing
May 15, 2018
https://www.helpnetsecurity.com/2018/05/15/vulnerability-disclosure-2018/

Unless the pace of vulnerability disclosure slows down in the coming quarters, we are looking at yet another record-breaking year, according to Risk Based Security’s 2018 Q1 Vulnerability QuickView Report.
Organizations need to be prepared
As more and more vulnerabilities are reported, organizations are forced to spend an increasing amount of time and resources to stay properly informed about the weaknesses affecting their IT infrastructure and applications. There is a further cost of ownership, as vulnerabilities disclosed also require proper prioritization, triage, and remediation.
The good and the bad
The good news when looking at the issues disclosed in Q1 2018 is that, about three fourths of the reported vulnerabilities did have a documented solution available. However, that still leaves over 1.300 of the disclosed vulnerabilities with no viable solution.
The importance of awareness
Administrators are beginning to realize that better awareness of disclosed vulnerabilities is critical to their operations. Along with this, comes the realization that their organization cannot rely on patch management solutions alone. In fact, a multifaceted approach that integrates vulnerability intelligence into both asset and patch management solutions, makes life a lot easier for system administrators while ensuring full coverage of potential security issues.
Click to expand...

guest · May 17, 2019

mood said: ↑

May 15, 2018
Click to expand...

One year later...
Q1 2019 Smashes Record For Most Reported Vulnerabilities in a Quarter
Once again, a high-proportion of the reported flaws have no current fix, according to Risk Based Security
May 17, 2019
https://www.darkreading.com/applica...d-vulnerabilities-in-a-quarter/d/d-id/1334757

More security vulnerabilities were publicly disclosed in the first quarter of this year than in any previous three-month period.

Troublingly, nearly four-in-10 (38.2%) of them currently have no known fixes, according to Risk Based Security, which recently analyzed vulnerability data for the firts quarter of 2019 collected from its own proprietary search engine and from various security vulnerability-reporting sites.
Product Integrity
Sixty-three percent of the security vulnerabilities disclosed last quarter affected product integrity.

Risk Based Security's analysis showed that some 14% of the vulnerabilities that were disclosed last quarter were critical, with severity ratings of 9 or higher on the CVSS scale.
The number of vulnerabilities with available fixes last quarter was some 13.5% lower compared to Q1, 2018.
Click to expand...

Risk Based Security’s 2019 Q1 Vulnerability QuickView Report

Log in or Sign up

The pace of vulnerability disclosure shows no signs of slowing

guest Guest

guest Guest

Log in or Sign up

The pace of vulnerability disclosure shows no signs of slowing

guest Guest

guest Guest

Useful Searches