The best way to predict security trends in the oncoming year is to look back and see what went wrong in the previous years. To that end, GFI labs released a report today on the most vulnerable applications and operating systems of 2013.
Most of the data are along the lines of what you would expect, Internet Explorer was very vulnerable, Java was very vulnerable, Windows was very vulnerable, etc. However some of the more specific details were a bit of a surprise and also mirror what researchers have been saying for quite some time.
Google ChromeAccording to the Most Vulnerable Applications chart, Google's Chrome browser is listed as the third most vulnerable software of 2013, actually increasing its vulnerabilities since 2012 by 43.
The caveat here is that while Google Chrome is listed as having more vulnerabilities, unlike Adobe products and Java, it is not actively targeted by exploit kits and therefore not an active threat to users.
Microsoft Windows 7The proof is in the pudding when it comes to the user transition from XP to 7. The report shows that vulnerabilities discovered for Windows 7 in 2012 were greater by 58 in 2013.
The newest Windows user platform, Windows 8, has shown to be a new target for cyber-criminals as the number of vulnerabilities found has risen dramatically from just five high severity vulnerabilities in 2012 to 43 in 2013.
I expect this number to rise even more in 2014 as new device purchasing increases the amount of people using Win 8.
The Good NewsDespite the fact that 2013 showed us the greatest vulnerability count in the last four years, it also has the third-lowest count of high severity vulnerabilities, most of them being medium and therefore, possible to protect against with common security practices.
- Updating the Operating System - Automatic Updates are annoying but they are your friend
- Updating Applications - Java and Adobe will keep popping up on your system asking for updates, listen to them
- Updating Security Software - All security software, including Malwarebytes Anti-Malware, has the option to update automatically and frequently, I highly recommend taking advantage of these features
- Updating Browsers - You can update Chrome and Firefox by going to the Help / About options respectively in each browser while Internet Explorer updates through Windows Update
However, the best thing for a user to do is to be observant while online. Users should keep an eye out for anything that doesn't seem right and tell people about it but most importantly, don't fall for it.
Thanks for reading and safe surfing! DFTBA!