You may have noticed that a remote exploit has been found in the venerated OpenBSD. Since this is only the second remote code execution condition found in 10 years, it warrants some attention, certainly. It had to hurt a little to increment that counter from "one" to "two" on the openbsd.org page.

What's interesting about this vulnerability, however, is that it's specific to IPv6. The Department of Defense has put some significant momentum behind IPv6 adoption, and this OpenBSD vulnerability got me thinking about how many untested implementations of IPv6 are out there. I imagine that as IPv6 gets rolled out, security researchers will find it an interesting avenue for exploit. Depending on how adoption occurs, we're likely to see a rash of IPv6 based exploits.

Don't get me wrong, it's not that there aren't IPv6 vulnerabilities out there, but ultimately, the attackers go where the target space is richest, and that isn't IPv6 today.