Alex Gaynor • 2/20/2018

Known unknowns - zero-days in the wild

The article examines the controversy over disclosing unpatched vulnerabilities, using Google Project Zero's disclosure of a Microsoft Edge flaw as a case study. It argues that the common demand for 'evidence of use in the wild' is flawed, as sophisticated attackers like nation-states operate stealthily. Citing examples like the Trident iOS exploit and reports from RAND, it contends that many zero-days are actively exploited for years without detection, necessitating a shift in how the security industry assesses risk.

0 comments

#cybersecurity #Threat Intelligence #Zero Day Vulnerabilities