« Ten Secure Browsing Extensions for Firefox | Main | Caveat Newbie: Ubuntu Forums Dealing With Malicious Heels »
November 28, 2007
Zero-Day Exploits Down. So what?
internetnews.com: SANS: Zero-Day Exploits on The Decline:
"Ed Skoudis, who serves as course director for SANS Incident Handling and Hacker Exploits, explained during the conference call why he thinks zero-day is on the decline.
"'One of the reasons is that bad guys don't have to use them (zero day),' said Skoudis, who also founded information security consultancy Intelguardians.
"For example, he said, the Storm worm propagates itself though users clicking on an e-mail link, and does not require a zero-day exploit to function.
"'When simple techniques work, there is no need to unfurl zero-days,' Skoudis said. 'Attackers can just save them for more targeted attacks.'"
Which is why all the braying about which operating system is more or less secure is bad for people who aren't reading the headlines: No operating system can protect you from yourself.
Posted by mhall at 8:10 PM | Add Comment
Leave a comment