Anilrgowda

California-based security company eEye Digital Security has unveiled a new site devoted to tracking zero-day vulnerabilities. The Zero-Day Tracker is designed to give users, IT administrators, and security researchers a greater awareness of unpatched vulnerabilities so they can take necessary risk-mitigation measures until the vulnerability is patched.
A look at the Zero-Day Tracker shows seven zero-day vulnerabilities currently being tracked. eEye lists the flaws, along with number of days since the bug was discovered and the severity of the bug. All seven bugs currently listed are from Microsoft with the newest a "high severity" unspecified exploit for Microsoft Word that was disclosed on December 5. eEye also maintains a list of recently patched vulnerabilities.
"More zero-day security vulnerabilities and attacks are being discovered every day and dealing with them can easily dominate an enterprise’s IT efforts," said eEye founder and current CTO Marc Maiffret. "As a result, we've been overwhelmed by requests from our customers to give them the information and time they need to protect their networks. Our Zero-Day Tracker is a direct response to this tremendous demand." The list will be maintained by eEye, although other security researchers are invited to contribute to the list.
Some security analysts are concerned that the number of disclosed zero-day vulnerabilities is growing. Whether that is indeed the case or whether they are more likely to be reported on is an open question. There also looks to be an increase in the number of attacks using unpatched bugs. Either way, the days of discreetly notifying vendors of new vulnerabilities and quietly waiting for a patch appear to be gone forever.