The Danish company said that data from its free Personal Software Inspector (PSI) tool showed that there were far more unpatched applications than operating systems among users. Furthermore application patches were left open to abuse for far longer than operating system patches.
“The criminals are developing more and more targeted attacks, focusing on the applications that are most likely to be unpatched,” said Secunia chief technical officer, Thomas Kristensen.
“Unfortunately another trend is also quite evident; private user don't patch! I think that many users are not aware of the problem with unpatched programs and the software companies don't inform sufficiently about the importance of updating and neither do they provide sufficient updating mechanisms.”
The figures were backed up by data in Microsoft’s last Security Intelligence Report, earlier this month, which found that 90 per cent of serious vulnerabilities were not found in Windows, but in third party applications.
“I would not hesitate to say that the biggest threat to your PC probably is a program you installed yourself, simply because it is out of date and insecure,” Kristensen continued.
Users not patching third party apps
By
Iain Thomson
on Apr 22, 2009 9:12AM

Got a news tip for our journalists? Share it with us anonymously here.
Partner Content

Tech For Good program gives purpose and strong business outcomes

How NinjaOne Is Supporting The Channel As It Builds An Innovative Global Partner Program

Build cybersecurity capability with award winning Fortinet training from Ingram Micro

Secure, integrated platforms enable MSPs to focus bringing powerful solutions to customers

Channel can help lead customers to boosting workplace wellbeing with professional headsets
Sponsored Whitepapers
-1.jpg&w=100&c=1&s=0)
Stop Fraud Before It Starts: A Must-Read Guide for Safer Customer Communications

The Cybersecurity Playbook for Partners in Asia Pacific and Japan

Pulseway Essential Eight Framework

7 Best Practices For Implementing Human Risk Management

2025 State of Machine Identity Security Report