IBM sees influx in zero-day exploits
posted Aug 26th 2008 4:56pm by Benjamin Eckelfiled under: firefox hacks, news, security hacks
IBM’s X-Force security team has released a mid-year report(PDF) stating that the number of zero-day exploits is growing at an alarming rate. For those of you unfamiliar with the term, a zero-day exploit is a program that is created and implemented within 24 hours of the disclosure of a security flaw. These exploits usually affect users before they even know the vulnerability exists and long before a patch is made available. The researchers also found that many of these exploits were targeted at browser plug-ins, which most users utilize on a daily basis.
[Kris Lamb], X-Force operations manager, is blaming the problem on a lack of a unified process for disclosing vulnerabilities. He also claims that the long-held practice of publishing example code of vulnerabilities should be frowned upon.
[via Liquidmatrix]
I thought it’d be common practice for the employees of security companies to be members of exploit rls sites? As they say, you can be whoever you want on the internet.
Posted at 6:47 pm on Aug 26th, 2008 by G