:

RAND Study Finds Zero-Day Software Vulnerabilities Have A Lifespan of Almost Seven Years

Wednesday, March 22nd, 2017

SHARE:

A newly released RAND Corp. study found that zero-day vulnerabilities have an average life expectancy (time between first private discovery and public disclosure) of 6.9 years, making it a reasonable option to stockpile vulnerabilities for cyber defenders and attackers.The study, “Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits,” was based on access to a dataset of over 200 zero-day software vulnerabilities. Zero-days are software vulnerabilities unknown to the vendor and can be used…

Congress

U.S. Fighter Fleet Will Expand By 2040 But More Stealth Aircraft Will Mean Less Availability, CBO Says

The number of fighter aircraft in the U.S. military inventory will decline over the next few years before expanding to a greater number than currently, but their availability for operational […]

Congress

White House Details ‘Concerns’ With Shipbuilding, Spaced-Based Interceptor Oversight In House’s NDAA

The White House has detailed “a number of concerns” with the newly-passed House version of the next defense policy bill, to include the legislation’s limits on procuring Navy ships built […]

Congress

House Narrowly Votes To Pass $1.15 Trillion FY ‘27 NDAA, Blueprint For Reconciliation 3.0

The House on Wednesday narrowly voted to pass its $1.15 trillion version of the fiscal year 2027 National Defense Authorization Act (NDAA) and a blueprint for a third reconciliation bill […]

Congress

Senate Appropriators Press On Supplemental’s Requests Beyond Iran Scope, Hegseth Urges Full Funding

Senate appropriators have pressed Pentagon leadership on the decision to include funds in the Iran war supplemental request for items beyond the current military operation, while Defense Secretary Pete Hegseth […]