[Tanel]

link :: The Next Web


Infoturbetarkvara tootja Kaspersky Labs IT ohtude TOP 10 tabelist ei leia enam Microsofti - uuemate Windows operatsioonisüsteemide (automaatsed) uuendused on nii tõhusad ja Microsoft on turvaaukusid nii kiirelt parandanud, et Kaspersky Labs 2012 kolmanda kvartali tabelist jäi Microsoft kogunisti välja.

Kaspersky Labs kolmanda kvartali IT-ohtude TOP 10 (inglisekeelne):

1. Oracle Java Multiple Vulnerabilities: DoS-attack (Gain access to a system and execute arbitrary code with local user privileges) and Cross-Site Scripting (Gain access to sensitive data). Highly Critical.
2. Oracle Java Three Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Extremely Critical.
3. Adobe Flash Player Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Gain access to sensitive data. Highly Critical.
4. Adobe Flash Player Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Bypass security systems. Highly Critical.
5. Adobe Reader/Acrobat Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Extremely Critical.
6. Apple QuickTime Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Highly Critical.
7. Apple iTunes Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Highly Critical.
8. Winamp AVI / IT File Processing Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Highly Critical.
9. Adobe Shockwave Player Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Highly Critical.
10. Adobe Flash Player Multiple Vulnerabilities: Gain access to a system and execute arbitrary code with local user privileges. Bypass security systems. Gain access to sensitive data. Extremely Critical.

Vaata ka: http://www.securelist.com/en/analysis/204792250/IT_Threat_Evolution_Q3_2012

[Tomorrow]

Java ja Flash on ikka räiged juustud
Paraku puuduvad ka mõistlikud alternatiivid

[Osiris]

Ot palju aastaid neil selleks tulemsueks kuluski

[ASSAA! elektroonika]

Arvestades võimalus, mida need moodulid pakuvad, siis tuleks pigem imestada, et neid turva-auke nii vähe on, et neid saab järjestada TOP 10'sse, mitte TOP 100'sse. Pealegi enamus riske on endiselt seotud arvuti kasutajapoolse tihendiga ning ohud on reaalselt välditavad.

[Mnator]

ASSAA! elektroonika, see on "top 10" aga mitte "full" nimekiri

[d3t]

PCman, üks tubli 7 aastat arendustööd.