|
|
Zero Day Expoilts are Here
|
07-22-04
(Philadelphia & Conshohocken, PA)
(Philadelphia & Conshohocken, PA)
From our friends at Security Focus.
Zero day exploits are here.
Case in point, the June 25th Russian attacks that turned IIS servers into delivery platforms for identity-thieving Trojan keystroke loggers.
The attacks relied on two vulnerabilities in Internet Explorer that security researchers discovered for the first time weeks earlier on a malicious adware-implanting Website.
At the time of the attack, no patch was available. ISPs were able to quickly contain the threat by shutting down traffic to the Russian host serving up the malware.
However, the episode proved that the zero day concern is more than hyperbole. As the window shrinks between the discovery of vulnerabilities and the exploits that follow them, security patching -- once an obscure and neglected chore -- is beginning to take on a more urgent role in some corners of the business world, say analysts and IT managers.
Leading the way are organizations with mission-critical technology -- chiefly finance agencies -- who've managed to reduce critical security patch times from weeks to just days.
The key, they say, is that they've moved patch management from their small security organizations into their network infrastructure management.
Source.
BACK to the Netforcement News Page.
REQUEST MORE INFORMATION On how Netforcement can help you secure the integrity of your network.
|
|
