Product Watch: eEye Revives Free Zero-Day Vulnerability Tracker Site

  /     /     /  
Publicated : 22/11/2024   Category : security


Product Watch: eEye Revives Free Zero-Day Vulnerability Tracker Site


Aims to be a one-stop shop for zero-day vulnerabilities, analysis



eEye Digital Security founder Marc Maiffrets recent return to the company was capped off today with the rerelease of an updated version of the security firms freebie zero-day vulnerability disclosure and analysis service he once spearheaded.
The
new Zero Day Tracker
contains the latest zero-day vulnerabilities and analysis on each one -- including some being reported by eEye researchers -- and ways to mitigate and protect against attacks using these bugs. Were trying to be more of a zero-day historian, if you will. Well keep track of something weve seen or ZDI [or others] have done, Maiffret says. This is a completely free public resource.
eEyes previous zero-day tracker page was out at a time when zero-day vulnerabilities werent the predominant bugs being used in real-world attacks, he says. Were seeing more commonly that zero-day vulnerabilities are now being used and in more widespread attacks. So we decided it was important to bring [the tracker service] back because its even more relevant now, Maiffret says. Organizations can come to the site and see a list of whats out there and how it might affect their business.
Our goal is to be a one-stop shop page to see the status of all current zero-days, he says. This is a resource for IT folks to see what the threat landscape looks like ... and making sure we keep pressure on software companies to fix their vulnerabilities, he says.
eEye will include unpatched bugs on the site, and the bugs it discloses wont include details on how to exploit them until a patch is released, he says.
Maiffret says theres almost always a zero-day bug out there affecting the majority of Web application configurations. The reality is that it doesnt matter how or when a researcher releases a zero-day, he says. [It] doesnt dramatically change the threat landscape because there are five other better ones being used in the wild.
Have a comment on this story? Please click Discuss below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News

▸ ArcSight prepares for future at user conference post HP acquisition. ◂
Discovered: 07/01/2025
Category: security

▸ Samsung Epic 4G: First To Use Media Hub ◂
Discovered: 07/01/2025
Category: security

▸ Many third-party software fails security tests ◂
Discovered: 07/01/2025
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
Product Watch: eEye Revives Free Zero-Day Vulnerability Tracker Site