{"id":56397,"date":"2024-06-25T00:00:00","date_gmt":"2024-06-25T00:00:00","guid":{"rendered":"urn:uuid:0f375545-0d4d-b322-ffa0-e90d1499e075"},"modified":"2024-06-25T00:00:00","modified_gmt":"2024-06-25T00:00:00","slug":"omdia-report-trend-disclosed-60-of-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/omdia-report-trend-disclosed-60-of-vulnerabilities\/","title":{"rendered":"Omdia Report: Trend Disclosed 60% of Vulnerabilities"},"content":{"rendered":"

<\/p>\n

<\/div>\n

What is Trend\u2019s Zero Day Initiative?<\/span><\/p>\n

Trend\u2019s Zero Day Initiative (ZDI) was created to encourage the reporting of 0-day vulnerabilities privately to the affected vendors by financially rewarding researchers. At the time, there was a perception by some in the information security industry that those who find vulnerabilities are malicious hackers looking to do harm. Some still feel that way. While skilled, malicious attackers do exist, they remain a small minority of the total number of people who discover new flaws in software.<\/p>\n

Incorporating the global community of independent researchers also augments our internal research organizations with the additional zero-day research and exploit intelligence. This approach coalesced with the formation of the ZDI, launched on July 25, 2005.<\/p>\n

Trend\u2019s ZDI operates as a global community of security researchers and experts dedicated to identifying and addressing the latest cybersecurity vulnerabilities. The approach is proactive: instead of waiting for vulnerabilities to be exploited in the wild (zero-day vulnerabilities), Trend works to discover, disclose, and help mitigate these issues before they can be exploited maliciously. Today, Trend\u2019s ZDI is the world\u2019s largest vendor-agnostic bug bounty program. Their approach to the acquisition of vulnerability information is different than other programs. No technical details concerning the vulnerability are sent out publicly until the vendor has released a patch. Should the vendor not release a patch within 120 days, select details of the vulnerability are published on Trend\u2019s ZDI website. This disclosure timeline ensures vendors do not ignore the report.<\/p>\n

The Significance of Trend’s Dominance in Vulnerability Disclosures<\/span><\/p>\n

1. Comprehensive Threat Coverage: <\/b>Trend’s role in 60% of all vulnerability disclosures demonstrates its extensive reach and capability in identifying security flaws across various platforms and technologies. This ensures that companies relying on Trend and it\u2019s Vision One platform receive thorough protection against a broad spectrum of threats.<\/p>\n

2. Breaking Down Severity:<\/b><\/p>\n