WannaCry Exposed Gaping Risk Window between Identifying Vulnerability Risk and Fixing It
RealWire
Tue, 06/20/2017 - 08:55

Maidenhead, U.K. – June 20, 2017 – When WannaCry hit, the world learned that for two months a patch had been available that would have prevented the problem. But its victims were those that hadn’t yet deployed this patch. As many companies discovered the hard way, there is an unacceptable ‘risk window’ that persists between the discovery of a software vulnerability and when the patch is successfully installed. In 2016 17,147 vulnerabilities were recorded in 2,136 products from 246 vendors.