1More Software Vulnerabilities Disclosed in 2016 Than Ever Before
Risk Based Security’s software vulnerability report for 2016 shows find that the number of new flaws found during the year set a record and that bug bounty programs are an important source of new discoveries.
2The Number of Vulnerabilities Keeps Rising
According to Risk Based Security’s VulnDB vulnerability tracking system, there were 15,000 reported vulnerabilities in 2016, setting a new record.
3Vulnerability Impact Varies
Not all of the vulnerabilities reported in any given year have the same impact. Common Vulnerabilities Scoring System (CVSS) scores, which attempt to measure the impact of a given vulnerability, have been trending higher in recent years, showing that both the volume and severity of vulnerabilities are on the rise.
4Vulnerabilities Were More Severe in 2016
Looking specifically at 2016, 21.3 percent of vulnerabilities in VulnDB had a CVSS score of between 9.0 and 10.0.
5Most Vulnerabilities Are Verified by Vendors
Of the vulnerabilities reported by VulnDB for the year, 80.1 percent were verified by a vendor, prior to being disclosed.
6Bug Bounty Programs Are Finding More Flaws
According to VulnDB, since 2013, bug bounty programs have becoming a leading source of disclosures, outpacing vendors’ own abilities to discover flaws.
7Vendor Response Times Vary
Different vendors had different response rates for dealing with vulnerabilities in 2016. VulnDB tracks the rates with its Vulnerability Timeline and Exposure Metrics (VTEM) system. Google had the fasted response time at only three days.
8XSS is the Most Common Web Vulnerability
Looking specifically at web vulnerabilities, Cross Site Scripting (XSS) accounted for 37 percent of reported web vulnerabilities in 2016, according to VulnDB.
AI 3D Generators are powerful tools for many different industries. Discover the best AI 3D Generators, and learn which is best for your specific use case.
I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
