MOST VULNERABLE OPERATING SYSTEM
Windows, which is often referred to as the most vulnerable operating system in the world and also an easy pie for hackers, is not even listed on the top three vulnerable OS. According to an analysis by the network and security solutions provider GFI, the top three most vulnerable operating system are:
- Apple’s Mac OS X
- Apple iOS
- Linux kernel
- Mac OS X - Total 147 vulnerabilities were reported, 64 of which were rated as high-severity
- Apple’s iOS - Total 127 vulnerabilities were reported, 32 of which were rated as highly-severity
- Linux Kernel - Total 119 vulnerabilities were reported, 24 of which were rated as high-severity.
The major vulnerabilities that took over the Internet in 2014 were as follows:
- HEARTBLEED - A critical security vulnerability detected in OpenSSL left large number of cryptographic keys and private data from the most important sites and services on the Internet open to hackers. It was considered to be one of the biggest Internet threat in history.
- SHELLSHOCK - A critical remotely exploitable vulnerability discovered in the widely used Linux and Unix command-line shell, known as Bash, aka the GNU Bourne Again Shell, left countless websites, servers, PCs, OS X Macs, various home routers, and many more open to the cyber criminals.
"2014 was a tough year for Linux users from a security point of view, coupled with the fact that some of the most important security issues of the year were reported for applications that usually run on Linux systems," explained GFI Software manager Cristian Florian.
MOST VULNERABLE APPLICATION
However, when it comes to applications, Microsoft proved to be on the contrary, as its Internet Explorer browser lead the list with 242 total vulnerabilities, with 220 of them being rated as critical.
Obviously, this could embarrass Microsoft, as Internet Explorer has nearly twice as many security flaws than the second most vulnerable application, which was Google Chrome.
Google Chrome browser had 124 vulnerabilities reported in 2014. On the other hand, Adobe Flash Player improved last year with only 76 vulnerabilities reported.
Out of those, 80% were reported in third-party applications, 13% in operating systems, and 4% in hardware devices.
For those who aren't aware, NVD is the US government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP).