I came across an article yesterday at secunia.com. Secunia is a leading provider of Vulnerability Intelligence and tracks the evolution

of security threats. They have posted their Half Year Report 2010 which includes some interesting trends and statistics. This

information may be of interest to some of our readers so I thought it might make an interesting diary.

The key highlights of the Secunia Half Year Report 2010 are:

Since 2005, no significant up-, or downward trend in the total number of vulnerabilities in the

more than 29,000 products covered by Secunia Vulnerability Intelligence was observed.

A group of ten vendors, including Microsoft, Apple, Oracle, IBM, Adobe, and Cisco, account on

average for 38 percent of all vulnerabilities disclosed per year.
In the two years from 2007 to 2009, the number of vulnerabilities affecting a typical end-user

PC almost doubled from 220 to 420, and based on the data of the first six months of 2010, the

number is expected to almost double again in 2010 to 760.
During the first six months of 2010, 380 vulnerabilities or 89% of the figures for all of 2009

has already been reached.
A typical end-user PC with 50 programs installed had 3.5 times more vulnerabilities in the 24

3rd party programs installed than in the 26 Microsoft programs installed. It is expected that

this ratio will increase to 4.4 in 2010.

The report does a good job of discussing the current trends and statistics and highlights what they are seeing for vulnerabilities.
To review thefull report you canseecheck it out athttp://secunia.com/gfx/pdf/Secunia_Half_Year_Report_2010.pdf.
Deb Hale Long Lines, LLC

(c) SANS Internet Storm Center. http://isc.sans.org Creative Commons Attribution-Noncommercial 3.0 United States License.

View full post on SANS Internet Storm Center, InfoCON: green

• Report: Nasdaq systems were hacked last year
  Federal authorities are investigating a computer intrusion at the company that runs the Nasdaq stock exchange, the Wall Street Journal reported Friday. Full story: Network World on Security...
• Analysis: Spam report: December 2010
  The amount of spam in email traffic increased by 0.3 percentage points compared to November and averaged 77.1%. Full story: Securelist / All Updates...
• PandaLabs Annual Report 2010
  2011 has just started, so it is time to look back at what has happened in the last year. Today we publish the 2010 Annual Security Report covering an extremely interesting year with regard to cyber-c...
• 2010 CyberCrime & Doing Time: Year In Review
  As we look back on 2010, I'd like to thank our 132,325 Visitors who read more than 214,000 stories on the blog which is a bit more than a 10% increase over our 2009 readership. I thought it might be...
• Top Security Trends of 2010: A Look Back
  Computer and network security is a perpetual game of cat and mouse. Attackers are often adept at both following technology and social trends, and adapting attacks to exploit weak points. As 2010 come...
• Analysis: Spam report: November 2010
  The Pushdo/Cutwail and Bredolab botnet command centers have been shut down; the SpamIt partner program went out of business; and a criminal case has been brought against Igor Gusev who is believed to...
• Analysis: Spam report: October 2010
  As we wrote in last month’s report , at the end of September law enforcement agencies arrested a number of members from the criminal group behind ZeuS. - on Securelist / All Updates...
• Analysis: Spam report: September 2010
  The most significant event of the month was the announcement in mid-September that the Spamlt partner program would be closed down on 1 October. View full post on Securelist / All Updates...
• Report: Global theft decreases in 2010
  The 2010 Global Retail Theft Barometer finds theft was down from 2009 rates. But more than a quarter of U.S. retailers were still impacted by crime. View full post on Network World on Security...
• EMEA Spam Growth, APAC Infections, in Global 1H 2010 Threat Report
  Trend Micro has released its Threat Report for the first half of the year. The report focuses on the global trends in online threats that we have seen. Threat Trends Europe became the largest source o...