Trend Micro ZDI credited with 60% of vulnerabilities disclosed worldwide in 2023, per Omdia report
Trend Micro announced that, according to an Omdia report (Quantifying the Public Vulnerability Market: 2023 Edition), its Zero Day Initiative (ZDI) discovered 60% of vulnerabilities disclosed worldwide in 2023. Omdia compared 9 vendors and organizations that publicly research and disclose vulnerabilities, covering 1,211 vulnerabilities that were assigned a CVE in 2023. Trend says it discloses over 2.5 times more vulnerabilities than its nearest rival, and that ZDI has been the largest vendor-agnostic bug bounty program for 16 consecutive years. This is vendor marketing with no specific threat, incident or exploited vulnerability, so it has no direct operational impact for defenders.
Technical Details
- Omdia severity breakdown of 2023 disclosures: 10% critical, 69% high, 21% medium, under 1% low.
- ZDI research feeds the Trend Vision One platform (XDR, attack surface management, virtual patching), including network IPS protection from the point a vulnerability is disclosed to the vendor, often weeks or months before an official patch.
- The article cites an average data breach cost of $4.45 million in 2023, an all-time high, for breaches whose initial access was an unpatched vulnerability.
Remediation
The article gives no specific remediation. It advocates proactive vulnerability management and timely disclosure, and promotes virtual patching as an interim mitigation.
Linha do tempo
-
Trend Micro ZDI credited with 60% of vulnerabilities disclosed worldwide in 2023, per Omdia report
ler a análise desta fonte ocultar
Trend Micro announced that, according to an Omdia report (Quantifying the Public Vulnerability Market: 2023 Edition), its Zero Day Initiative (ZDI) discovered 60% of vulnerabilities disclosed worldwide in 2023. Omdia compared 9 vendors and organizations that publicly research and disclose vulnerabilities, covering 1,211 vulnerabilities that were assigned a CVE in 2023. Trend says it discloses over 2.5 times more vulnerabilities than its nearest rival, and that ZDI has been the largest vendor-agnostic bug bounty program for 16 consecutive years. This is vendor marketing with no specific threat, incident or exploited vulnerability, so it has no direct operational impact for defenders.
Technical Details
- Omdia severity breakdown of 2023 disclosures: 10% critical, 69% high, 21% medium, under 1% low.
- ZDI research feeds the Trend Vision One platform (XDR, attack surface management, virtual patching), including network IPS protection from the point a vulnerability is disclosed to the vendor, often weeks or months before an official patch.
- The article cites an average data breach cost of $4.45 million in 2023, an all-time high, for breaches whose initial access was an unpatched vulnerability.
Remediation
The article gives no specific remediation. It advocates proactive vulnerability management and timely disclosure, and promotes virtual patching as an interim mitigation.