Kaspersky released their 2012 third quarter report of the top ten vulnerabilities and no Microsoft product is on the list. The data in the report is based on vulnerable programs and files detected on the computers of KSN users. There was an average of eight different vulnerabilities on each affected computer.
Topping the list is Oracle Java, followed by Adobe products, particularly Adobe Flash Player. Also included in the list are two Apple products, Quick Time and iTunes. The list of vulnerabilities can be found on the Securelist, "IT Threat Evolution: Q3 2012", here (http://www.securelist.com/en/analysis/204792250/IT_Threat_Evolution_Q3_2012#14).
Noticeably missing from the results of the report are any Microsoft products. So, although I continue to include Microsoft Security Updates as a priority and include antivirus software and a firewall, it is increasingly important to stay current with third-party programs.
Recommendations:
- Continue installing Microsoft Security Updates: Windows Update - Keep your PC up to date (http://windows.microsoft.com/en-US/windows/help/windows-update)
- Use a software firewall: Firewall: frequently asked questions (http://windows.microsoft.com/en-US/windows-vista/Firewall-frequently-asked-questions)
- Keep your antivirus software updated: Microsoft Security Essentials - Microsoft Windows (http://windows.microsoft.com/en-US/windows/security-essentials-download)
- Consider uninstalling Oracle Java: Do You Need Java? (http://securitygarden.blogspot.com/2010/10/do-you-need-java.html)
- Allow Adobe Flash Player to Autoupdate: Adobe - Flash Player : Help - About Updating Adobe Flash Player (http://www.macromedia.com/support/documentation/en/flashplayer/help/help10.html). With Firefox, use NoScript (http://noscript.net/) or Flashblock (https://addons.mozilla.org/en-US/firefox/addon/flashblock/) which also blocks Macromedia Shockware.
- Consider an alternative to Adobe Reader, such as Sumatra PDF (http://blog.kowalczyk.info/software/sumatrapdf/free-pdf-reader.html).
Don't be a statistic. Stay safe and keep your computer updated.