IBM: hackers become more accurate and dangerous

[Детективное агентство ИКС-Инфо.]

IBM today released its traditional semi-annual report, X-Force, covering the period of the second half of 2011. The main conclusion of the report is that hackers began to attack less, but much more accurately. If in previous years the attacks were massive, now they are targeted and in some cases they are generally aimed at a group of users or one specific user. The authors of the report say that in general, attackers are now redefining their strategy, moving to more niche attacks, using trending technologies such as social networks or mobile devices. IBM notes that over the past two years, the amount of spam in absolute terms has been halved, while hackers began to monitor software holes and, when they were identified, use them lightning fast. The basis for this is quite fertile: among all the applications tested by IBM, more than a third contained potential vulnerabilities. However, a year earlier this indicator was even higher - 43%. The report says a sharp increase in complex phishing attacks targeted at business users from an industry, such as the public sector or the oil industry. Also, experts say a significant increase in the activity of automated hacker tools that search for holes in server or client computers. The report says that over the period under review the number of exploits circulating in the network decreased by about a third, being at the lowest level over the past 4 years. The number of unclosed vulnerabilities related to software security has also decreased, although the rate of 36% is still considered by many experts to be too high. Another trend in 2011 was the drop in the number of XSS vulnerabilities, which is associated with a noticeable increase in the quality of web programs. In part, this can be explained by the fact that many CMS systems, where traditionally vulnerabilities of this kind were located, were equipped with complexes for scanning for cross-scripting bugs. At the same time, IBM claims that over the year the number of attacks on DBMSs related to malicious code injection has almost doubled. The publicly announced number of programs that are subject to SQL injection decreased by 46%, however, the activity of both automated tools and manual attacks more than doubled.
https://uinc.ru/news/sn17471.html?utm_so ... 2% D0% B8% 29

 

[Орлан]

Thanks Roma, read, interesting.

 

[Матушкин Андрей Николаевич]

Thank!

 

[Патрушев Михаил Владимирович]

Thank!