Trend Micro's Zero Day Initiative Again Named Market Leader in Public Vulnerability Disclosures

Rhea-AI Summary

Trend Micro has been recognized as the leading vendor in public vulnerability disclosures for 2019, according to a report by Omdia. The company’s Zero Day Initiative (ZDI) disclosed 573 vulnerabilities, accounting for 52.3% of the total disclosures among 11 vendors. This is the tenth consecutive year that ZDI has maintained its market-leading position. Notably, Trend Micro discovered 56.2% of high-severity and 60.5% of medium-severity vulnerabilities. The initiative has been pivotal in improving product security, offering an average protection of 81 days before vendor patches are released.

Positive

• Trend Micro's ZDI disclosed 573 vulnerabilities, 52.3% of total disclosures.
• Dominated in high-severity (56.2%) and medium-severity vulnerabilities (60.5%).
• Consistent market coverage over the last decade.
• ZDI has facilitated responsible disclosure of over 7,500 vulnerabilities.

Negative

• None.

DALLAS, Aug. 17, 2020 /PRNewswire/ -- Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today released results from a new report by Omdia that found its Zero Day Initiative (ZDI) disclosed the most vulnerabilities in 2019. This independent research analyzed disclosures from 11 vulnerability research vendors, with the ZDI maintaining its position as the world's largest vendor-agnostic bug bounty program for the 10th year in a row.

The ZDI's work helps to improve product security for all users and is especially useful for Trend Micro TippingPoint customers who are protected for an average of 81 days before vendor patches are released.

"So many cyber attacks leverage unpatched vulnerabilities, allowing attackers to steal sensitive data, disrupt operations and spread damaging malware, which ultimately results in losses for victims," said Brian Gorenc, senior director of vulnerability research for Trend Micro. "We're proud to continue what we've been doing for 15 years – leading the coordinated disclosure market. Coordinated disclosure is critical in the vulnerability industry to actually improve software security, which is what we care about most."

Omdia evaluated the activity of 11 research organizations/vendors to compile its study, Quantifying the Public Vulnerability Market, cross-referencing this data against information published by government agencies including NIST, MITRE and the US CERT/CC.

Out of a total of 1095 vulnerabilities claimed by the 11 vendors, including 14 claimed twice, Trend Micro's ZDI accounted for 573 (52.3%), 3.5 times more than the next vendor, which disclosed 15%. This market coverage remains consistent with that of 2018, as the ZDI remains the dominant industry player.

"Trend Micro's Zero Day Initiative continues to lead the vulnerability disclosure market, contributing not only the most bugs, but also the most dangerous exposures for business security," said Tanner Johnson, senior analyst for Omdia. "Working with vendors that are depended on by businesses around the globe helps raise the bar for security across the board."

Trend Micro also dominated in terms of the number of high severity vulnerabilities (56.2%) and medium severity (60.5%) it discovered and disclosed. Additionally, when analyzing the types of products targeted, a significant total of 269 PDF vulnerabilities disclosed by all vendors last year, with 61% of the total coming from the ZDI.

Founded in 2005, Trend Micro's ZDI changed the vulnerability disclosure market using bug bounty rewards to incentivize researchers. The ZDI is powered by over 10,000 independent researchers contributing research from many different areas of the software landscape, including business applications, operating systems, mobile, IoT and even ICS/SCADA within critical infrastructure. It has facilitated the responsible disclosure of over 7,500 vulnerabilities and paid researchers more than $25 million in bounties.

For more information and to read the full report, please visit: https://resources.trendmicro.com/rs/945-CXD-062/images/OMDIA_Public_Vulnerability_Report_July_2020.pdf.

About Trend Micro
Trend Micro, a global leader in cybersecurity, helps make the world safe for exchanging digital information. Leveraging over 30 years of security expertise, global threat research, and continuous innovation, Trend Micro enables resilience for businesses, governments, and consumers with connected solutions across cloud workloads, endpoints, email, IIoT, and networks. Our XGen™ security strategy powers our solutions with a cross-generational blend of threat-defense techniques that are optimized for key environments and leverage shared threat intelligence for better, faster protection. With over 6,700 employees in 65 countries, and the world's most advanced global threat research and intelligence, Trend Micro enables organizations to secure their connected world. www.trendmicro.com.

View original content:http://www.prnewswire.com/news-releases/trend-micros-zero-day-initiative-again-named-market-leader-in-public-vulnerability-disclosures-301112659.html

SOURCE Trend Micro Incorporated

FAQ

What is the significance of Trend Micro's Zero Day Initiative for 2019?

Trend Micro's Zero Day Initiative disclosed the most vulnerabilities in 2019, accounting for 52.3% of all reported vulnerabilities.

How many vulnerabilities did Trend Micro disclose in 2019?

Trend Micro disclosed 573 vulnerabilities in 2019.

What percentage of high-severity vulnerabilities did Trend Micro disclose?

Trend Micro disclosed 56.2% of the high-severity vulnerabilities reported in 2019.

How does Trend Micro's ZDI contribute to cybersecurity?

ZDI improves product security by enabling average defense for 81 days before vendor patches are released.

What is the history of Trend Micro's ZDI in vulnerability disclosures?

Trend Micro's ZDI has maintained its position as the leading public vulnerability disclosure program for ten consecutive years.