Cloud related bug reports jump 275 percent
The Zero Day Initiative said that the number of bugs reported in 2018 is on track to beat its previous busiest year, 2017. Zero Day Initiative said Monday that so far in 2018, it has published 600 advisories, up 33 percent from the 451 published in 2017. Interestingly, we had fewer advisories released as 0-day this year. The first six months of 2018 saw only 23 advisories exceed our coordination timelines as opposed to 49 last year, a decrease of 42%. That means we successfully coordinated 577 bug reports with the vendor to release alongside a security patch or other mitigation.
Here are some of the biggest trends in 2018, so far. SCADA bugs are continually on the rise, with those types of bugs accounting for more than 30 percent of submissions to the program. Bugs were reported in Delta Industrial and Omron products, but Advantech ultimately rose to the number one spot on the bug reports list. Bugs reported in Microsoft products has jumped up 121 percent year-over-year, with many of these bugs being reported in browsers. Overall, Microsoft only released 8% more patches in the first half of this year versus the first half of 2017, so the rise in bug reports to the program shows program growth rather than just increased bugs in Microsoft products
Adobe bugs reported remains consistent, as there were only two more Adobe reports this year over last year. Researchers are seeing more bug reports at virtualization software like Oracle VirtualBox this year. Overall, reports on the virtualization product are up 275 percent since last year. Researchers also sees continued growth in vulnerability research, and also an increase in the potential bugs reported. It's impossible to predict how the rest of 2018 will go, but if we use 2017 as a guide, it will be even busier.