Virtually every Windows PC at risk, says Secunia
Almost all PCs scanned by patch tool have an unpatched app; 46% have 11-plus
Computerworld - More than 98% of Windows computers harbor at least one unpatched application, and nearly half contain 11 or more programs at risk from attack, a Copenhagen-based security company said today.
According to Secunia APS, 98.1% of the PCs on which its Personal Software Inspector (PSI) utility was installed during the past week sport one or more applications that have security updates available for downloading.
PSI scans Windows systems for installed applications, then compares their version numbers to the most up-to-date versions; if they're different, it makes note, then provides a link to the patch update. To gather its numbers, Secunia tracked the results of each user's first PSI scan.
Since Nov. 25, when PSI left beta and entered Version 1.0, more than 120,000 people downloaded the utility, said Thomas Kristensen, Secunia's chief technology officer. The company randomly selected 20,000 of those installations, then tallied the number of unpatched applications PSI found.
"Most people keep Windows up to date because it's so easy to use Windows Update," said Kristensen. "Adobe Reader and Flash and Apple QuickTime are like that, too, as are browsers. But a lot of third-party [browser] plug-ins don't have any [update mechanism] and so people don't keep them updated."
The PSI data showed that while fewer than 1.9% of the users had completely clean PCs, 30.3% of the machines contained between one and five unpatched programs, 25.1% had between six and 10 at-risk applications, and 45.8% of the systems boasted 11 or more insecure programs.
Today's numbers were even more dismal than those Secunia collected last January, when it surveyed a similar number of PCs that had just installed PSI. Then, approximately 4.5% of the machines were free of unpatched programs, more than twice as many as in the newest survey.
Kristensen explained the decline. "We've had a change in the user base and managed to reach a much broader group of users," he said. PSI's early adopters were mostly tech-savvy types, but as word has spread about the utility, "it's reached a completely different group of users, many who never patch their PCs," Kristensen noted.
Since Secunia launched the free utility in mid-2007, about 900,000 users have downloaded the program. "We should clear 1 million around the first of the year," Kristensen said.
Read more about Security in Computerworld's Security Topic Center.
- Mobile First: Securing Information Sprawl Learn how the partnership between Box and MobileIron can help you execute a "mobile first" strategy that manages and secures both mobile apps...
- Cybersecurity Imperatives: Reinvent your Network Security The Rise of CyberSecurity
- Surescripts Case Study- Securing Keys and Certificates Surescripts implemented Venafi's Trust Protection Platform™ to secure digital keys and certificates, ensure the privacy and confidentiality of electronic clinical information for its...
- Ponemon 2014 SSH Security Vulnerability Report According to research by the Ponemon Institute, 3 out of 4 enterprises have no security controls in place for SSH which leaves organizations...
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities.
- Deep Dive into Advanced Networking and Security with Hybrid Cloud Security and networking are among the top concerns when moving workloads to the cloud. VMware vCloud® Hybrid Service™ enables you to extend your... All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!