Navigating Vendor Dilemmas in Patching Cybersecurity Flaws

Booming numbers of security researchers are uncovering so many flaws that vendors are finding it almost impossible to patch them all in a reasonable timeframe, the latest SANS report has found. This paradox is one of a number of findings contained in the Top Cyber Security Risks report, which the organisation now plans to publish twice yearly in association with data provided by customers of partners TippingPoint and Qualys, upgrading the annual reports it has produced for some years.

More researchers hunting for flaws should be a good thing, but the report for March to August 2009 suggests that this has created logistical problems for an industry that is still heavily focused on adding features and product enhancement as its main priority.

The link for this article located at Network World is no longer available.