IBM: Public vulnerabilities are tip of the iceberg

IBM's Internet Security Systems division has warned that there is a "colossal difference" between the number of publicly disclosed security vulnerabilities and the number of vulnerabilities that are discovered but not publicly disclosed.