:

RAND Study Finds Zero-Day Software Vulnerabilities Have A Lifespan of Almost Seven Years

Wednesday, March 22nd, 2017

SHARE:

A newly released RAND Corp. study found that zero-day vulnerabilities have an average life expectancy (time between first private discovery and public disclosure) of 6.9 years, making it a reasonable option to stockpile vulnerabilities for cyber defenders and attackers.The study, “Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits,” was based on access to a dataset of over 200 zero-day software vulnerabilities. Zero-days are software vulnerabilities unknown to the vendor and can be used…

Army

Hegseth Says DoD Open To Reviewing Army’s Planned Cuts To Legacy Helicopter Procurement

Defense Secretary Pete Hegseth has told lawmakers the Pentagon is open to reviewing the Army’s planned procurement cuts to its legacy manned aviation fleet. Rep. Rosa DeLauro (D-Conn.), ranking member […]

Congress

Appropriators Press For Details On Iran War Costs; DoD’s $29B Estimate Doesn’t Include Base Damage

The Pentagon estimates the U.S.’ ongoing conflict with Iran has now cost at least $29 billion, while a lead official noted the updated figure does not factor in damage to […]

Congress

Appropriators Offer Skepticism On $350B Defense Reconciliation Plan, ‘Big Risk’ For Key Initiatives

Senate and House Appropriators told Pentagon leadership on Tuesday they’re skeptical of the department’s plan to fund $350 billion of the fiscal year 2027 defense budget through the reconciliation process, […]

Congress

All Future Systems Should Have Autonomy Features, Reed Says

Last week, Sen. Jack Reed (D-R.I.) visited North Kingstown, R.I.-based Senesco, which is teaming with autonomous systems company Havoc to bid on the U.S. Navy’s Medium Unmanned Surface Vessel program. […]