4 edits | it seems that, in the top ten list, there are multiple entries for oracle's "java" and adobe's "flash player", pretty much crowding out anything else..
one could consider that it is a lot easier for the criminals to simply target "java", "flash player" and "adobe reader", which may be why they don't target MS products as much, which might be why MS products are not listed in the "top ten"..
in the securelist report, according to kaspersky, 55% of "attacks", via "exploits", involve oracle's "java" while another 25% of "attacks", via exploits, involve "adobe reader".. so, to my thinking, by not using "java" or "adobe reader" (using "foxit reader", instead), you are closing off 80% of the attack-surface..
i edited the post.. it wasn't that 80% of "malware-infections" were due to using "java" and "adobe reader" but that 80% of "attacks", via exploits, involved using "java" and "adobe reader".. |
·