Trend Micro's Zero Day Initiative Leads in Public Vulnerability Disclosures for 15th consecutive year

BENGALURU, – Global cybersecurity leader, Trend Micro Incorporated, today celebrated the success of its Zero Day Initiative (ZDI), which, according to Omdia was responsible for nearly 64% of all vulnerabilities disclosed in 2021.

An independent comparative analysis of 11 global organizations which publicly research and disclose vulnerabilities was provided by Omdia. A total of 1,543 vulnerabilities were analysed, disclosed and assigned a CVE in 2021.

Of the 984 submitted by Trend Micro's ZDI, 36% were critical, 70% were classified as high severity, and 45% were medium severity.

The results reflected that the ZDI disclosed and managed over thrice more vulnerabilities than its closest competitor and remains the world's largest vendor-agnostic bug bounty program for the 14th consecutive year.

Every vulnerability discovered and responsibly disclosed reduces the opportunity for malicious actors to craft surprise zero-day attacks. So the year-on-year increase in the total number of vulnerabilities disclosed by all 11 vendors is to be welcomed. This figure climbed 12% from 1,378 in 2020.

Sharda Tickoo Technical Director for Trend Micro, India and SAARC: "Having led the charge since the very first market analysis in 2007, the ZDI has expanded its volume of vulnerability disclosures for the fifteenth successive year. Our vulnerability research is second to none globally, both pre-and post-disclosure. In the ongoing race against malicious actors, we are proud to lead the industry in helping make the digital world a safer place."

Average impact score of vulnerabilities also increased y-o-y over the past three years. This means that the vulnerabilities disclosed could have a bigger impact if exploited. CVEs added to the US National Vulnerability Database (NVD) hit a record high for the fifth successive year in 2021.

Tanner Johnson, principal analyst for Omdia said: "This year's data also revealed that monitoring software was responsible for the largest number of vulnerabilities submitted. This is another positive sign, as more organizations utilize this software to identify threats faster. "