Symantec Internet Security Threat Report

If you're at all interested in or responsible for security (corporate, personal, whatever), the Symantec Internet Security Threat Report is a must-read (you have to register, but it's worth it).

Some scary facts include:

1. Over the past six months, the average time between the announcement of a vulnerability and the appearance of associated exploit code was 5.8 days.
2. Over the first six months of 2004, the number of monitored bots rose from well under 2,000 computers to more than 30,000.
3. Over the first six months of 2004, Symantec observed worm traffic originating from Fortune 100 corporations.
4. During the first six months of 2004, e-commerce received more targeted attacks than any other industry.
5. In the first half of 2004, 479 vulnerabilities, or 39% of the total volume, were associated with Web application technologies.
6. Even though no significant worm outbreaks have plagued Linux (or BSD) systems in the last six months, a steady flow of vulnerabilities has been discovered and used in proof-of-concept exploits.