Over 90 percent of Microsoft flaws could be fixed

WinInfo | at | by Mike

Developers at BeyondTrust examined all of the security vulnerabilities that Microsoft disclosed in 2008 and came to a startling conclusion: Over 90 percent of them could have been completely mitigated if Windows users simply ran under normal user rights instead of with administrative privileges. "This speaks to what enterprises should be doing," BeyondTrust CEO John Moyer says. "Clearly, eliminating administrative rights can close the window of opportunity of attack." Looked at in a product-by-product comparison, 69 percent of Windows flaws in 2008 could be have completely averted by users running under non-admin privileges, as could 89 percent of IE flaws and 94 percent of Microsoft Office flaws.