Want a 75 percent chance of breaking your app? Install a security patch

New research released from Endor Labs finds that security patches have a 75 percent chance of breaking an application. It also shows that 69 percent of vulnerability advisories are published after a patch has been released, with a median delay of 25 days between public patch availability and advisory publication, increasing the window of opportunity for attackers to exploit vulnerable systems. For a vulnerability in an open source library to be exploitable, there must be, at minimum, a call path from the application to the vulnerable function in that library. The report finds this to be true in fewer than… [Continue Reading]