SecurityTube

Exploits Kits Target Old Vulnerabilities More Than Zero Days, Research Finds

JB

Zero-days may make the most noise in the news, but many exploit kits are relying on tried-and-true vulnerabilities to get the job done.

According to research from security vendor Solutionary, 58 percent of the vulnerabilities targeted by the most popular exploit kits in the fourth quarter of 2012 were more than two years old. The report did not say what the most commonly exploited vulnerability was. However, researchers did find that BlackHole 2.0 – despite being the most often used exploit kit based on volume – targets fewer vulnerabilities than other exploit kits. The most versatile of the kits was Phoenix, which supports roughly 16 percent of all vulnerabilities being exploited, according to the report.