:

RAND Study Finds Zero-Day Software Vulnerabilities Have A Lifespan of Almost Seven Years

Wednesday, March 22nd, 2017

SHARE:

A newly released RAND Corp. study found that zero-day vulnerabilities have an average life expectancy (time between first private discovery and public disclosure) of 6.9 years, making it a reasonable option to stockpile vulnerabilities for cyber defenders and attackers.The study, “Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits,” was based on access to a dataset of over 200 zero-day software vulnerabilities. Zero-days are software vulnerabilities unknown to the vendor and can be used…

Army

Lawmakers Request DoD Briefing On Army’s Planned Cuts To Aviation Procurement

A bipartisan group of House lawmakers has sent a letter asking the Pentagon for a briefing on the potential industrial base impacts as a result of the Army’s planned cuts […]

Congress

CENTCOM Looking To Lessons Learned From Use Of LUCAS Drones

U.S Central Command (CENTCOM) is looking to lessons learned from its use of Low-cost Unmanned Combat Attack System (LUCAS) drones by Phoenix-based SpektreWorks, according to CENTCOM head Adm. Brad Cooper. […]

Army

Hegseth Says DoD Open To Reviewing Army’s Planned Cuts To Legacy Helicopter Procurement

Defense Secretary Pete Hegseth has told lawmakers the Pentagon is open to reviewing the Army’s planned procurement cuts to its legacy manned aviation fleet. Rep. Rosa DeLauro (D-Conn.), ranking member […]

Congress

Appropriators Press For Details On Iran War Costs; DoD’s $29B Estimate Doesn’t Include Base Damage

The Pentagon estimates the U.S.’ ongoing conflict with Iran has now cost at least $29 billion, while a lead official noted the updated figure does not factor in damage to […]