8 de fevereiro de 2012

Why is a 14-month-old patched Microsoft vulnerability still being exploited?

Why is a 14-month-old patched Microsoft vulnerability still being exploited?:
http://sophosnews.files.wordpress.com/2012/02/cumulative_numbers.png

The media - and indeed many parts of the security industry - just looove zero-day exploits. They are exciting to report, to research, to block...but interestingly, SophosLabs sees much more malware exploiting patched vulnerabilities.


I know - it's a bit weird. Why would malware authors bother to target a vulnerability for which a patch is already available for download...for free? Surely, it would be a lost cause, a dud, a lemon, a non-starter.

Sem comentários:

Enviar um comentário