(image: Korea Bizwire/Kobiz Media)
SAN JOSE, Calif., Jul. 24 (Korea Bizwire) – Skybox® Security, a global leader in cybersecurity management, today announced the release of the mid-year update to its 2019 Vulnerability and Threat Trends Report, analyzing the vulnerabilities, exploits and threats in play over the first half of 2019. The report, compiled by the team of security analysts at the Skybox® Research Lab, aims to help organizations align their security strategy with the reality of the current threat landscape.
Among the key findings of the report is the marked growth of vulnerabilities in cloud containers. Containers, which create a distinction between virtual servers hosted on a shared machine, have seen vulnerabilities increase by 46 percent in the first half of 2019 compared to the same period in 2018, and 240 percent compared to 2017 H1 figures.
“Cloud technology and adoption have obviously skyrocketed, so it’s no surprise that vulnerabilities within cloud technology will increase,” said Skybox Director of Threat Intelligence, Marina Kidron. “What is concerning, though, is that as these are published, the race is on for attackers to develop an exploit because launching a successful attack on a container could have much broader consequences. Compared to other technology, containers can be more numerous and quickly replicated. The attack footprint could expand rapidly, and number of victims may be extremely high.”
“Container vendors put a great deal of attention to securing their products in the first place,” said Amrit Williams, VP of products. “But that also means reporting vulnerabilities when discovered. It’s critical that customers have a way to spot those vulnerabilities even as their environment may be changing frequently. They also need to assess those vulnerabilities’ exploitability and exposure within the hybrid network and prioritize them alongside vulnerabilities from the rest of the environment — on prem, virtual networks and other clouds.”
Also notable in the report is a decline in the total number of vulnerabilities published. Over the last two years, the total number of new vulnerabilities has outstretched any other previous year. However, the number of vulnerability reports in 2019 H1 declined by 13 percent when compared to the same period last year. Still the current figures are historically high, and it seems annual totals around 15,000 new CVEs will be the new norm.
“More than 7,000 new vulnerabilities were discovered in the first half of 2019 — that’s still significantly more than figures we’d see for an entire year pre-2017. So organizations are likely still going to be drowning in the vulnerability flood for some time,” said Ron Davidson, Skybox CTO and VP of R&D. “Roughly a tenth of these have an exploit available and just one percent are exploited in the wild. That’s why it’s so critical to weave in threat intelligence into prioritization methods, and of course consider which vulnerable assets are exposed and unprotected by security controls.”
To read the full 2019 Vulnerability and Threat Trends Report, click here.
Tweet This: #Cloud #container vulnerabilities increase by 240 percent since 2017, acc. @SkyboxSecurity #VTTrends report. Read full stats here: http://bit.ly/30zuD2Y
About Skybox Security
Skybox provides the industry’s broadest cybersecurity management platform to address security challenges within large, complex networks. By integrating with 130 networking and security technologies, the Skybox® Security Suite gives comprehensive attack surface visibility and the context needed for informed action. Our analytics, automation and intelligence improve the efficiency and performance of security operations in vulnerability and threat management and firewall and security policy management for the world’s largest organizations.
© 2019 Skybox Security, Inc. All rights reserved. Skybox Security and the Skybox Security logo are either registered trademarks or trademarks of Skybox Security, Inc., in the United States and/or other countries. All other trademarks are the property of their respective owners. Product specifications subject to change at any time without prior notice.
CONTACT INFORMATION
Colleen Nichols
Director of Corporate Communications for Skybox Security
+1 925 383 5539 | colleen.nichols@skyboxsecurity.com
Allison + Partners for Skybox Security
United Kingdom: Daniel Couzens
+44 (0)20 7437 0227 | danielc@allisonpr.com
Germany: Stephanie Thoma
+49 (0)89 388 892 012| stephaniet@allisonpr.com
France: Xavier Delhôme
+33 1 41 31 75 09 | xavierd@allisonpr.com
Source: Skybox Security via GLOBE NEWSWIRE
