When security products become a risk themselves
Summary
Several cases showed that proprietary security products themselves create new attack surfaces and dependencies.
References
Links to the original source and the Web Archive open in a new tab.
Related posts
fefe · 2024
A race condition in FreeBSD’s mutex implementation
A use-after-free race condition in FreeBSD userspace mutexes allowed local privilege escalation in the kernel.
fefe · 2023
Critical Confluence vulnerability exploited before the patch
Attackers exploited a critical Confluence vulnerability weeks before the vendor’s patch was available.
fefe · 2022
Security configuration between help and false security
Security tips only help if they explain risks and do not create false trust in individual measures.