Volume 5 of the Microsoft Security Intelligence Report is now out, highlights include:

• Security vulnerability disclosures - Microsoft and third-party software
• Vulnerability Exploits – Microsoft software
• Browser-based exploits - Microsoft and third-party software
• Security and privacy breaches
• Malicious and potentially unwanted software trends

Volume 5 of the SIR also includes a detailed examination of the threat ecosystem which explains how threats propagate across the internet, how users become infected and the resultant impact on privacy and identity theft.

 

The one item that stood out for me was the move from successfully attacking Microsoft applications and browser objects to attacking and compromising 3rd-party applictions and browser objects.