Microsoft, IBM Report Fewer Critical Vulnerabilities, Exploits

InfoWorld: Two separate pieces of data indicate that software makers are improving the security of their products. First, the number of critical vulnerabilities in Microsoft software has hit the lowest point in six years. “The fact that we’re seeing lower percentages of critical issues and bulletins year-over-year demonstrates the progress made by the product groups in creating more secure software,” said Microsoft’s Mike Reavey.

Second, IBM is reporting that hackers are exploiting a smaller percent of all vulnerabilities–down from 15 percent in 2010 to 10.8 percent in 2011. “These things may be the consequence of there being fewer valuable vulnerabilities that are getting disclosed and also exploitation is getting harder because operating systems have a lot of these feature … that make exploitation more challenging,” said IBM’s Tom Cross.