Software Flaws Used in Hacking More Than Double in 2015, Setting Record: Symantec

Advertisement
By Reuters | Updated: 12 April 2016 10:44 IST
Software Flaws Used in Hacking More Than Double in 2015, Setting Record: Symantec
The number of previously unknown software flaws used by hackers more than doubled last year, a new report says, in another sign of the increasing sophistication of cybercrime and online espionage.

Secret vulnerabilities in computer programs are especially prized by criminal gangs, law enforcement and spies because software vendors have not been warned and so cannot publish fixes.

In 2015, 54 such holes came to light and were deployed by hackers, according to a report published on Monday by the largest security software vendor, Symantec Corp. That is up dramatically from 24 the year before and 23 the year before that; the next-highest total over the past 10 years was 15 in 2007.

Symantec's total of "zero-day" or unknown vulnerabilities includes both flaws that were discovered because they were used by top-flight hackers who left tracks and those that were revealed to the public at the same time as the software maker.

In 2015, electronic files named "Hacking Team" were dumped on the Internet, including six zero-days that criminals quickly made use of.

Advertisement

Thousands of other flaws were identified as usual last year by vendors, outside researchers, and government agencies. The vendors develop and issue patches, either announcing the flaws or pointing to them by virtue of the fixes.

Since criminals and others immediately take advantage of flaws to reach into unfixed machines, users must patch rapidly and completely or face being hacked.

Advertisement

Though most attacks happen because of inadequate patching, the rapid spread of new flaws through "exploit kits" sold in underground forums has allowed zero-days to be obtained by more people, including those installing ransomware and programs for stealing financial logins.

Four of the five most-used zero-day vulnerabilities last year were in Adobe Systems Inc's Flash software, which can be used as a standalone program or a plug-in for various Web browsers, not all of which automatically update with Flash patches. Symantec said it expected Flash to become less popular as platforms stop supporting it, making it less of a bonanza for hackers.

Advertisement

Adobe said it had improved its security response. "Flash Player is one of the most ubiquitous and widely distributed pieces of software in the world, and as such, is a target of malicious hackers," the company said via email.

"With regards to zero-days, we've been able to expedite the patching process to just days."

© Thomson Reuters 2016

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement

Related Stories

Popular Mobile Brands
  1. OTT Releases This Week: Mandala Murders, Ronth, Rangeen, and More
  2. iQOO Z10 Turbo+ Officially Confirmed to Run on This Chipset
  3. Huawei Band 10 Review
  4. Honor Pad X7 With 8.7-Inch Display and Snapdragon 680 SoC Launched
  5. Google Will Now Let You Virtually Try-On Clothes Before You Purchase Them
  1. Who-Fi: An AI-Powered Wi-Fi Technology That Can Identify and Track Individuals Without Cameras
  2. NASA’s X-59 Moves Closer to First Flight with Advanced Taxi Tests and Augmented Vision
  3. Unusual Plasma Waves Above Jupiter’s North Pole Can Possibly Be Explained
  4. NASA to Live Stream SpaceX Crew-11 Launch Docking, Know How to Watch Online
  5. Apple Expands App Store Age Rating System With More Granular Categories
  6. Amazon Kindle Colorsoft Kids With 7-Inch Display and a Kid-Friendly Cover Launched
  7. Dying Light: The Beast Delayed to September for 'Extra Polishing Work'
  8. Flipkart Freedom Sale 2025 Date Revealed; Plus, VIP Members To Get Early Access
  9. Huawei Mate XT 2 Colour Options Leaked; Could Be World’s Second Mass-Produced Tri-Fold Phone
  10. Blender Is Working on a Standalone App for iPad Pro With Apple Pencil Support
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.