Downward Trend in Publicly Available Exploit Code? Don’t Ease Up on Patch Management Just Yet

September 14, 2017

The IBM X-Force Vulnerability Database (XFDB), which holds over 100,000 publicly disclosed vulnerabilities, is chock-full of insights concerning the cybersecurity threat landscape. Much of the data is publicly available directly on the IBM X-Force Exchange platform and can be accessed by users anytime.

In reviewing the database on an ongoing basis, the IBM Security Threat Research Group found a particularly interesting trend persisting over the last five-plus years. It appears there has been a near-constant decline in publicly available exploits or proof-of-concept (PoC) code for known vulnerabilities, in contrast to past trends where those exploits were made public, shown a full PoC, sold or even shared freely on hacking forums.

Read More on Security Intelligence