All the latest UK technology news, reviews and analysis

Security disclosures tip the stock market

by Shaun Nichols

More from this author

13 Oct 2008

Be the first to comment

  • Tweet this
Stock prices
Vulnerability disclosures could be used to manipulate stock prices

The disclosure of software vulnerabilities can have an impact as far away as Wall Street, according to a recent report by security firm McAfee.

Researcher Anthony Bettini examined the most regular of all vulnerability disclosures, Microsoft's Patch Tuesday, and found that the company's stock price is routinely lower on the days when it releases patches.

Bettini credited much of this impact on stock price to the press stories and concerns which surround the disclosures.

The fluctuations in Microsoft's stock price on Patch Tuesday are relatively minor and short-lived in comparison with other market forces, but Bettini warned that a clever researcher or investor could manipulate the disclosure process to pull off significant stock fraud.

"Consider that fake vulnerability disclosures and rumours already appear today on mailing lists such as Full Disclosure or on IRC chat rooms," Bettini explained.

"It is possible that events could be orchestrated via social engineering to manipulate the market and its participants."

The McAfee report was written weeks ago for inclusion in the company's security journal, but its release comes just days after the SEC opened an investigation into possible stock fraud after a false report claiming that Apple chief Steve Jobs had suffered a heart attack.

David Marcus, security research and communications manager at McAfee, told vnunet.com that the similarities between the Microsoft and Apple scenarios were not lost on the company. "It was really kind of eerie, truth be told," he said.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

99%

0%

1%

0%

0%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

Electronics Engineer, Real Time Control Systems Engineer

Electronics Engineer, Real Time Control Systems Engineer...

Electronics Software Engineer - C - Control Systems Programming

Electronics Software Engineer - C - Control Systems Programming...

Winform Software Developer

I'm looking for a Software Developer that will report...

Principal ETL Consultant (IBM DataStage)

A Principal ETL Consultant with expertise in IBM InfoSphere...

To send to more than one email address, simply separate each address with a comma.