Microsoft Security Summary: Don’t Sweat 0-days & Wise Up Stupid and Lazy Users!

After collecting data from over 600 million computers worldwide, Microsoft released the Microsoft Security Intelligence Report Volume 11 [PDF] Microsoft said less than 1% of exploits were against zero-day vulnerabilities. 90% of all exploits targeted vulnerabilities that had a security patch available for a year or more. Almost half of all malware infections can be chalked up to stupid users, Microsoft report concludes. The web is still the most common vector for delivering exploits, including malware via HTML IFrames and JavaScript. Adobe Flash exploits jumped more than 40 times in volume from last quarter.”]

Source: https://www.csoonline.com/article/2220852/microsoft-security-summary–don-t-sweat-0-days—wise-up-stupid-and-lazy-users-.html