Security News > 2011 > April > Attackers find old vulnerabilities are still the best

http://gcn.com/articles/2011/04/05/hp-cybersecurity-report-old-vulnerabilities.aspx By William Jackson GCN.com April 05, 2011 The number of new vulnerabilities being discovered has leveled off for the past two years and is well down from its 2006 peak, according to a report on 2010 security trends from Hewlett-Packard, an indication that secure software development is beginning to mature. But that is small comfort, as attackers continue to successfully exploit existing vulnerabilities, said Dan Holden, director of HP DVLabs and a contributor to the report. “There is a lot of attack surface for the attackers to choose,” Holden said. “They don’t need any more vulnerabilities to be successful.” Attackers are supported in their efforts by exploit toolkits that are becoming more professional and better packaged and by the lack of patching done by many computer users to correct known vulnerabilities in software. [...]

News URL

http://gcn.com/articles/2011/04/05/hp-cybersecurity-report-old-vulnerabilities.aspx