:

RAND Study Finds Zero-Day Software Vulnerabilities Have A Lifespan of Almost Seven Years

Wednesday, March 22nd, 2017

SHARE:

A newly released RAND Corp. study found that zero-day vulnerabilities have an average life expectancy (time between first private discovery and public disclosure) of 6.9 years, making it a reasonable option to stockpile vulnerabilities for cyber defenders and attackers.The study, “Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits,” was based on access to a dataset of over 200 zero-day software vulnerabilities. Zero-days are software vulnerabilities unknown to the vendor and can be used…

Congress

Senate’s CR Has Ship Construction Exemption, Forgoes White House’s Battleship, Munitions Requests

The Senate on Sunday released a bipartisan stopgap funding proposal to keep the government open through December 11, which would also secure additional funds to support ongoing shipbuilding efforts and […]

Congress

U.S. Fighter Fleet Will Expand By 2040 But More Stealth Aircraft Will Mean Less Availability, CBO Says

The number of fighter aircraft in the U.S. military inventory will decline over the next few years before expanding to a greater number than currently, but their availability for operational […]

Congress

White House Details ‘Concerns’ With Shipbuilding, Spaced-Based Interceptor Oversight In House’s NDAA

The White House has detailed “a number of concerns” with the newly-passed House version of the next defense policy bill, to include the legislation’s limits on procuring Navy ships built […]

Congress

House Narrowly Votes To Pass $1.15 Trillion FY ‘27 NDAA, Blueprint For Reconciliation 3.0

The House on Wednesday narrowly voted to pass its $1.15 trillion version of the fiscal year 2027 National Defense Authorization Act (NDAA) and a blueprint for a third reconciliation bill […]