Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.
There’s been a 65% increase in network vulnerabilities in the third quarter of this year compared to the same time last year, according to a new study from Internet Security Systems, Inc.
The study also shows that the growth of hybrid threats has increased nearly 30%, while the number of new vulnerabilities has grown at a rate of nearly 9% since the first quarter of this year.
“One area we are watching closely is the aggressive nature of recent worms, which are both persistent and increasingly sophisticated in their ability to evade traditional network perimeters and antivirus defenses,” says Chris Rouland, a director at Internet Security Systems (ISS), an Atlanta-based security firm.
Actually, the ratio of new hybrid threats to new vulnerabilities increased for each quarter — going from 21% in the first quarter to 25% in the third quarter.
Worms are actually increasing, not only in capability, but also in time to delivery, according to Dan Ingevaldson, a team leader at ISS.
“One of the things we’ve seen over the last quarter is that when worms are coming out there’s an ever-decreasing amount of time between the initial release of the vulnerability and the time when it’s rolled into a worm and released,” says Ingevaldson. “Nimda used a vulnerability in Internet Information Services (IIS) that was a year old. The Slapper worm came out about two weeks after the announcement of the Apache vulnerability.”
Ingevaldson says that means it’s more important than ever to stay on top of needed patches and to stay aware of what vulnerabilities are cropping up. But he says it’s just as important not to rush blindly into installing anything — even a patch.
“It’s not just about downloading a patch and installing it,” he explains. “There’s an enormous cost to it. You’ve got to do testing. Does security have the right to apply patches to servers run by IT? What if the patch breaks the system? It shouldn’t be a knee-jerk reaction.”
Ingevaldson also points out the survey shows that on average 21% of security events happen over the weekend, when the security staff is generally at its lowest level. But Tuesdays show the highest rate of security events throughout the third quarter, logging in at 297,379.
RELATED NEWS AND ANALYSIS
-
Huawei’s AI Update: Things Are Moving Faster Than We Think
FEATURE | By Rob Enderle,
December 04, 2020
-
Keeping Machine Learning Algorithms Honest in the ‘Ethics-First’ Era
ARTIFICIAL INTELLIGENCE | By Guest Author,
November 18, 2020
-
Key Trends in Chatbots and RPA
FEATURE | By Guest Author,
November 10, 2020
-
Top 10 AIOps Companies
FEATURE | By Samuel Greengard,
November 05, 2020
-
What is Text Analysis?
ARTIFICIAL INTELLIGENCE | By Guest Author,
November 02, 2020
-
How Intel’s Work With Autonomous Cars Could Redefine General Purpose AI
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
October 29, 2020
-
Dell Technologies World: Weaving Together Human And Machine Interaction For AI And Robotics
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
October 23, 2020
-
The Super Moderator, or How IBM Project Debater Could Save Social Media
FEATURE | By Rob Enderle,
October 16, 2020
-
Top 10 Chatbot Platforms
FEATURE | By Cynthia Harvey,
October 07, 2020
-
Finding a Career Path in AI
ARTIFICIAL INTELLIGENCE | By Guest Author,
October 05, 2020
-
CIOs Discuss the Promise of AI and Data Science
FEATURE | By Guest Author,
September 25, 2020
-
Microsoft Is Building An AI Product That Could Predict The Future
FEATURE | By Rob Enderle,
September 25, 2020
-
Top 10 Machine Learning Companies 2020
FEATURE | By Cynthia Harvey,
September 22, 2020
-
NVIDIA and ARM: Massively Changing The AI Landscape
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
September 18, 2020
-
Continuous Intelligence: Expert Discussion [Video and Podcast]
ARTIFICIAL INTELLIGENCE | By James Maguire,
September 14, 2020
-
Artificial Intelligence: Governance and Ethics [Video]
ARTIFICIAL INTELLIGENCE | By James Maguire,
September 13, 2020
-
IBM Watson At The US Open: Showcasing The Power Of A Mature Enterprise-Class AI
FEATURE | By Rob Enderle,
September 11, 2020
-
Artificial Intelligence: Perception vs. Reality
FEATURE | By James Maguire,
September 09, 2020
-
Anticipating The Coming Wave Of AI Enhanced PCs
FEATURE | By Rob Enderle,
September 05, 2020
-
The Critical Nature Of IBM’s NLP (Natural Language Processing) Effort
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
August 14, 2020