6 ms·
We Are Toast: Latest Malware report
- jgrahamc 18y agoTwo issues are interesting here: 1. The overall trend in malware variants as putting the signature based scanning mechanisms of old in risk because of the total volume. 2. Spam is getting simpler (as predicted by PG long ago).
- CWuestefeld 18y agoInteresting conclusion that we should think about: bad guys are moving "up the stack", targeting businesses themselves rather than users. However, the path that the Gartner article takes to get there is garbage. The graph at the top should tip you off to "lies, damned lies, and statistics": when there are no labels for the axes, what do they expect you to think? Showing an increasing number of vulnerabilities in web apps really just shows that the number of web apps is increasing. This "revelation" doesn't necessarily show that any particular user is more vulnerable; if they're using the same set (or same number) of services, then we have no data showing an increased risk per service. And for any particular service, we don't even have any suggestion of increased exposure. Personally, I'm relieved to see reports like "SQL injection attacks increased by 30x within the last six months". This kind of vulnerability is so trivially avoided that I'm glad to hear that the bad guys are wasting their time on it.
- stcredzero 18y agoProvable security could still be a major selling point for a web framework. (If it were implemented in a way that didn't compromise other functionality.)
- stcredzero 18y agoThank you, PHP!